Yeah, it should be made illegal to hold like, more than x columns of PII per entity or bank branch or something. It's just not smart to allow big database of everyone to be made and to expect you stay the one to abuse than to be nails that gets beaten using it.