It would be a pipe dream, but at the conclusion of the gag period there should additionally be a disclosure requirement - like a data breach notification. That would help balance out the desire to keep these things under wraps.