What is insane is putting in regulation in areas like this instead of just punishing people for mis-conduct.
So in theory yes, in reality I am doubtful.
Implementing regulations for every company as if they are the same is what is absurd here.
There is a difference between making a law that punishes wrongful use of information and then forcing companies to do things a certain way. That's the point here which seems to be missed on most.