We should guard against the misuses and create enough legal frameworks to protect individuals' privacy (and aggressively uphold those protections). Private companies already do that - if I query a database for PII without proper approvals, or I query it outside the approval's boundaries, it'll take a couple minutes for me to receive something between a harshly worded e-mail and a visit from a couple large people who appear surgically incapable of smiling.