Legal scrutiny for data collection storage sharing practices