Former GRC analyst here. I can tell you that if my CEO invited the dude from the parking garage into the office and let him go ham on secure, private data, we’d call the police to have them both arrested. Period. So I guess I just don’t get what the fucking problem is here. We shouldn’t have to pass legislation to enforce an existing law.