Businesses could become more transparent and only implement the mandatory customer privacy protections. Not do what they've always done "protect our IP and bullshit policies". Focus their money and effort on the real differentiators, their people.