In the 80s there was a wave of kidnappings in Italy.
A new law made it so that relatives bank accounts were frozen immediately and they where forbidden to pay.
I don't remember the details but it was a wildly successful move.
Was those bank accounts blocks where a successful move, or kidnappings stopped due to other measures government made?
So I'd say it's exactly the same.
If you want to stop city from paying the the law need to state that even if they get their data back they need to delete it.