I think that's a very good point. When we issue the lists, we provide with the lists some guidelines, which you have probably seen. If you look at the guidelines, you can see that part of them relate to the legal obligations under the act—the purposes for which this data may be used and so forth—but a number of recommendations are just best practices that we have no authority to enforce.
They are about how you keep track of who in your campaign has those lists, making sure that you recover the lists after the campaign, and safeguarding them when they're not being used by your volunteers. There are important things that campaigns can do and should be doing over and above any legal requirement.