Comment by analog31

I think that over time, it will become more apparent that the only solution is to criminalize possession of the data, with a process for collecting statutory damages upon discovery. A precedent exists in the recording industry, where sharing of copyrighted songs results in automatic damages without the need to quantify the actual harm. That process already has fair provisions for willful and accidental use.

This in turn would lead to an industry that hunts for evidence on a contingency basis.