Kind of like that, yes - though it is not so much a right as it is a practical consideration. The difficulty is that companies aren't going to willingly share information that might then be turned around to indict them. So to quell those fears the messaging is very clear: "we will not use this information to regulate or indict you".