Maybe I'll take the first part.
Once the data has been integrated into the technology, it's done. If there are benefits that come, the benefits are derived; if there are harms, they're already there.
The fine you're referring to is the one I had mentioned related to the Privacy Shield and how the data could be used by intelligence services without recourse for the individual. You do want recourse for the individual, but at the same time, even if you give the data back, the data has already been harnessed by the technology and whoever holds that technology.