> In a broader vein, it's time for regulation forbidding the retention or aggregation of any person's data for any commercial purpose other than the one most pr

> In a broader vein, it's time for regulation forbidding the retention or aggregation of any person's data for any commercial purpose other than the one most proximal to the actual transaction in which the person engaged, unless they explicitly opt in. This is basically GDPR