> that's what should be illegal: to give discounts based on whether you disclose your PII or not That would definitely help, but I think it wouldn't be enough.

> that's what should be illegal: to give discounts based on whether you disclose your PII or not That would definitely help, but I think it wouldn't be enough. Drugstores would promptly come up with some app-related trick, like "just scan this QR-code to redeem your discount", and personal-info would be acquired indirectly. They started to elaborate a bill recently, addressing the case of drugstores in particular, but I suspect they will eventually deliver something full of breaches, just like they did in the State of Sao Paulo. Moreover, drugstores are on the spot currently, but there are plenty of companies doing exact the same nowadays. >