> the "nongovernmental, independent third party" offering the service can't retain personal identifying information and must protect it from unauthorized access. don't companies everywhere fucking fail at this constantly with nothing happening to them?
Finland