@kaved, thank you for taking the time to comment/correct, especially on the GDPR 😀. The U.S. lacks a precisely equivalent law. We have a mish-mash of weaker rules that stretch between: (A.) Allowing knuckleheads to harm themselves, while protecting enterprise; and (B.) Protecting knuckleheads from their own shenanigans, at the expense of enterprise' freedom to generate profit. The U.S. typically protects profit; it's what we do.
Personally, I believe that enterprises offering data processing services are 100% obligated - morally and ethically, if not legally - to handle customers' data responsibly. On the street, we all know what that means, but that's not how the internet's business model evolved. If people had to pay the actual, equitable price for services, most of the internet would collapse immediately. The internet's bills are getting paid by a round-robin ponzi scheme of daily advertising cash flows and click fraud.
Meanwhile, any CEO who actually sacrifices one thin dime of profit over regulatory compliance will be fired in an activist shareholder coup. Dig deep enough, we sometimes find that certain big shareholders are either in Congress, or financially influenced by lobbyists through dark moneyed PACs, "Inauguration Funds", pork barrel kickbacks, etc. That's why criminal penalties for PII & financial data breaches are laughable: Legislators with financial interests ensure that it remains less expensive for an enterprise to pay the fines, than it is to comply with laws.
Cynical dystopian melodrama aside, and with
no suggestion whatsoever that enterprise be let off the hook... There remain binary choices for how to play the game. We can choose hardware, software, methods and procedures that are less sensitive to data crime and compliance fails. We can accept personal responsibility to work around those parts, and live with those outcomes (extra clicks, manual file management, less portability) - like 1998 when 993s were affordable.
In the U.S., aluminum extension ladders are for sale. They are cheaper than fiberglass. Overhead power cables are not electrically insulated. Winning a Darwin Award is a choice.