Could it be made illegal to store personal information of users? Or even just restricted to particular industries? How many services do you use that even need it?