> Companies handling data will always have enough lobbyist to make their particular way of doing things technically legal (“we didn’t sent ID, we shared hashes”

> Companies handling data will always have enough lobbyist to make their particular way of doing things technically legal (“we didn’t sent ID, we shared hashes”). > What they should be judged on is whether people understand what they are doing Nope, it's waaayy easier to regulate this at the root of the problem rather than going person by person asking if they understand a 15-page legalese EULA they did not read.