I could agree in theory, it's just that 1 & 2 don't happen in the real world. (Outside of EU?) There are no incentives, responsibility, or consequences for folks once data has been acquired.

It's like the friend that swears they will pay you back if you would just lend them a substantial amount of money. Said enthusiasm drops 95% once the transaction has completed.