How do you think we should regulate these tools?

Im worried that lawmakers cannot/will not truly appreciate the imminent danger of having billions of the most detailed psychological profiles in history stored in a hackable database until a major attack occurs.