I can't agree with this more, and I really hope we can see some legislation in the US that creates very strict penalties for lying about this stuff, and possibly some regulations that can make storing user data more risky to the company doing it, which would hopefully put pressure on them to reduce or eliminate data storage where possible.