I would love to see a rider from the courts mandating a significant third party test by privacy researchers to see if the deidentified data can be reconstructed from models post training.
That is good enough for me. If they violate their promise to the judge, the court can lay the hammer down on them