off topic - what about privacy compliance scanning?

I was wondering if it could be interesting for spamassassin to get also into the business of scanning for personal/sensitive data. Maybe as a separate project?

I have the impression there is growing demand for "personal identifiable information" services. I have the impression that such scanning is really close to the stuff spamassassin is already doing. No idea if there are already such open source projects.