The sheer variety of the technology's potential applications makes it almost impossible to regulate with legislation alone. Instead, interested parties at all levels need to assess the potential impact on privacy, data protection, and ethics on a case-by-case basis.