Maybe it is just me, but sounds like the ideas to monetize are running ever so low.

What are their legal obligations to protect this data and not share or sell it to anyone?