Outlaw the sharing (and therefore resale) of all personally identifiable information. If companies want PII from their users, they should ask those users direc

Outlaw the sharing (and therefore resale) of all personally identifiable information. If companies want PII from their users, they should ask those users directly for permission. The legal test for a violation is straightforward: if a user can be de-anonymized from what the company shares along with public information.