In a sane world, there would be sane laws with stiff penalties (as in, jail). For instance, "any identifying data about individual users may only be used for authentication and shall be completely under the control of the user. 'Under control' means the user is allowed to delete it. Examples of activity not compatible with 'under control of the user' include training AI models. Illegal use of authentication data will represent a felony punishable by XYZ."
And even then, if there is jail, it's not beyond a corporation to appoint a lesser VP to serve the jail time and just "take care of" him when he gets out. The American agricultural products company you would think it is + their American bank + some British banks did so years ago when they got caught trying to offset the cost of R&D farmland in Africa by leasing it out to those warlord / death squad types (and their arms dealers) who hand machetes, cocaine, and AK47s to 10 year olds.
In a sane world, there would be sane laws with stiff penalties (as in, jail). For instance, "any identifying data about individual users may only be used for authentication and shall be completely under the control of the user. 'Under control' means the user is allowed to delete it. Examples of activity not compatible with 'under control of the user' include training AI models. Illegal use of authentication data will represent a felony punishable by XYZ."
And even then, if there is jail, it's not beyond a corporation to appoint a lesser VP to serve the jail time and just "take care of" him when he gets out. The American agricultural products company you would think it is + their American bank + some British banks did so years ago when they got caught trying to offset the cost of R&D farmland in Africa by leasing it out to those warlord / death squad types (and their arms dealers) who hand machetes, cocaine, and AK47s to 10 year olds.