Laws aren't the problem here. If the data exists it will be abused, if not by the government then by corrupt insiders.