I should have been more explicit, if I understand you. I support not just making it illegal for any minor to be on any big SM, but also creating standards and specifications for data ownership, controls, collection, and privacy that are hard and accompanied with extreme punishments, i.e., per intentional, negligent, or reckless violation; per data point, not incident. Make the companies aware that a single event can crater the whole corporation if the corporation cannot prove that its officers did not act in violation of the corporation and are therefore personally responsible, and they will keep the rules.