It doesn't have to have an effect to everyone, it's about taking responsibility and actually defining what they're doing.
Once we have everyone actually publishing what they're doing it's a lot simpler to file complaints to DPA's and to verify they're actually compliant with legislation.