It needs to be stronger than that. There ought to be penalties for activities outside the specified scope (preferably criminal in cases that exceed some minimal

It needs to be stronger than that. There ought to be penalties for activities outside the specified scope (preferably criminal in cases that exceed some minimal threshold of severity). Just stopping it at the trial level is inadequate if we want the policy-sketched privacy to be meaningful.