You're right that it doesn't make sense. It suggests a failure in data handling (who can I share this with?).

A lot of these are borrowed from the US .gov in which prosecution is a relatively effective way to get compliance with these policies, but, and I'll take some license here, are copied to appear sophisticated by unsophisticated players outside of that.