Oh yeah, I strongly agree those need to be stopped to. We keep hand wringing over all these leaks and such and "oh gee how to we improve security?", when the clear solution is to not allow it in the first place. That way a leak doesn't become some lame civil matter, but "oh, you had this plainly-illegal-to-collect info? Looks like your business is over" (which would be a rare occurrence, if it were actually that risky to do it, since it'd be hard to keep such collection secret given how many people would be involved and so how many potential whistle blowers there would be, and how large a "paper" trail is necessarily involved in mass-scale data collection, making it extremely easy to investigate and prove)