law reaches businesses that collect personal information from 50,000-plus consumers per year, regardless of revenue As it should. Why are they collecting it in

law reaches businesses that collect personal information from 50,000-plus consumers per year, regardless of revenue As it should. Why are they collecting it in the first place? The requirement is not onerous; simply refrain from actively collecting data that you don’t actually need. That’s it. Just think of data as a liability rather than an asset and everything else comes naturally.