> Are you literally saying they have no way to order all the first-level companies to stop sharing data on someone?

This is exactly what he's saying. There is no central node of control for this kind of information. You are operating from entirely unjustified assumptions.