They say sharing so it’s solely duplicating data everywhere, effectively increasing the attack surface…

And this would violate my favourite GDPR principle ; purpose based consent. I give my data to the healthcare body for handle reimbursement and I like it that way. No need for them to share that data with anyone else. Same for the tax guy: let him scrutinise the shit outa my incomes but that’s it, don’t share it with the fucking police or whoever else.

But yeah… this is a difficult topic even in a sane country. We’re talking USA here…