Once you give your data away no regulation can keep it safe, it is already compromised the second it is given.