I will say that the European Union legislation has a similar issue that it relies too excessively on de-identification. As I mentioned in my statement, the fact that the privacy legislation puts too much emphasis on modifying personal information puts it at odds with what the technology that is currently being developed can do.
We're no longer in this world where we protect data by modifying it. We're protecting data by carefully analyzing it with guarantees that come from the way the data is analyzed, and so I think that just underlies the entire.... If you look at AIDA and CPPA, both of them rely too excessively on de-identification to be implementable in a world where people are going to analyze data with AI, and this is the same in other legislation, and it's the same in the European Union.