There has to be a range of options. Strong privacy is simply expensive to do well and not everyone cares to do it well. We should expect strong privacy from i

There has to be a range of options. Strong privacy is simply expensive to do well and not everyone cares to do it well. We should expect strong privacy from institutions that need it (any government, including municipal, and organizations such as AT&T) and give out pseudonyms to others. Your employer should be competent to keep your personal data secured as well, and they likely will have to do that by selecting a reputable provider for HR operations services. Yes, we should "work towards" strong privacy by default, but since we'll never get there we need to accept alternative models.