To be fair, "an entire x" does have markedly different connotation than "x". The emphasis is that it's, well, the entirety of x. It's the difference between "i ate the cereal" and "i ate all the cereal".
Also, Oregons DMV was compromised in the MoveIt, so my biometrics were also taken. Pair that with the notice I received from Blue Cross/Blue Shield that their data processor was compromised mean every appointment, diagnosis and medical issue and my biometrics details were also compromised.
I was really pissed about both of those and the fact there is no accountability and I'll get a $4 settlement from some shitty class action and 24-48 months of "Identity protection", since, as we all know, data thieves only use stolen data in the first few years after it's stolen. Especially biometric data that can't change like eye color, height, and medical conditions.
The US needs aggressive consumer protections to be able to delete and limit data storage ala California's law, but also default separate storage for legacy info or auto-deletion after a certain time period to limit damage.