Enforcing compliance is hard, not least because of concerns that government will use the data for political ends.