And, I submit that the federal privacy law, governs the collection and use of personal data by federal agencies and which provides agencies a modicum of flexibility, is a reasonable point of departure for future discussions of either industry selfregulation or legislation.
I think the federal privacy law regulates how personal data is used by agencies.