I'm looking for a line to draw between acceptable sharing/collection of data and non-acceptable sharing/collection of data. I think there is a line somewhere a

I'm looking for a line to draw between acceptable sharing/collection of data and non-acceptable sharing/collection of data. I think there is a line somewhere around "personally identifiable". Looking at the data elements currently recorded (or, I guess, officially recorded), it looks very dry and non-identifiable. Not necessarily fully-anonymized, though. I think I would be okay with this information being aggregated, analyzed, and even sold to insurance companies (perhaps even marketers, why not?). But as soon as the data is being shuffled around with personally identifiable information attached to it, I agree with you. Is there a better line between acceptable and non-acceptable?