> most every company wants to know as much as possible about their customers And it's crazy that we're allowing them to do that in the "data breach era". Compa

> most every company wants to know as much as possible about their customers And it's crazy that we're allowing them to do that in the "data breach era". Companies should should be incentivized/penalized to keep the absolute minimum information it needs for its services. The less data, the better, and the less it would be penalized in case of a data breach. The more data it stores and the more data it exposes in a data breach, the bigger the penalties should be for it. Companies would ignore that at their own peril, as the penalties should be a big percentage of the global annual revenues. So a company like Equifax would have to come out either crippled or bankrupt out of a data breach where it exposed all of the US adults' information. Build the right system, and companies will be "incentivized" to do the right thing. This is why the EU is doing the right thing with the GDPR, and if the US Congress wasn't completely captured by corporations by now, it would probably do something like that, too. But even GDPR doesn't go as far as I'd like, to the point where companies would be incentivized to use minimum amounts of information and switch to end-to-end encrypted systems (which by default would bring minimum to zero penalties in case of server data breach).