If you only base good/bad actions around the law (which I understand is really the only _real_ reference point we have), then that's part of the problem.

Technology moves faster than the law, we all know this.. What we need are ethical companies who not only respect the law but also respect the data owners.

We need a company with a motto like "don't be evil" or something like that.. if only, right? ;-)