We cannot independently audit all 10,000 data controllers that they’re not sending data to PRC territory or other non-adequate territory. Some other mechanism needs to be designed, both in law and algorithm, to make joint data controllership work, for crowdsource to work, without over relying on just a single institutional entity that worked only because data collection and processing was expensive.