That said, this data should be limited in scope and use…

Yep, anonymized, limited, non-distributable, and secured, with severe penalties (on the order of tens of thousands of dollars per person, paid to the harmed party) for failure to adhere.