There isn't much to gain for who? If regulations will help companies see that hoarding personal data is a liability they will do less of it, and US consumers will have less to lose in each new data breach by companies. That's a lot to gain for consumers!