The issue is that the legal system is retroactive, and information that is made public cannot be retracted. If a random company gets your sensitive data and disseminates it to the world, then sure, they will face legal repercussions, but the damage would have already been done to you.