I see no problem with a rule that effectively says no company can exist if it holds such detailed records on millions of people.