You can ban possession of the data if you attach statutory damages per infraction.