Right, there have to be stringent stipulations that they can only hold the data for a set period of time, it must be deleted and zeroed out in the right way, and they have to make a new request when their license time on it expires. Overall, it's completely feasible, but still a totally new area of consumer protection.