Does America not have data protection laws that prevent this sort of sharing?