This work in progress paper was presented at the 8th Asian Privacy Scholars Network Conference held at the Faculty of Law, National University of Singapore.