If the data is collected at all, it can be collected incorrectly (e.g. stored in such a way that it is stolen eventually, “permissions” be damned). Still solving the wrong fundamental issue.<p>We desperately need to work on reducing the importance of data itself. We must assume by default that all information <i>will</i> be improperly handled pretty much anywhere (or, that the task of keeping it secure indefinitely is just too hard).<p>That means: data whose usefulness expires extremely quickly (with corresponding protocols), and the complete retirement of stupid bits of information we now carry like social security numbers and credit card numbers that can instantly screw you in the wrong hands. In fact, we ought to have proxies for EVERYTHING; I don’t know why I even have to hand out my home address, for instance, when in theory I could give a company some temporary proxy address that routes to my house only as long as I ALLOW that forwarding; after that, it becomes meaningless and cannot be used for junk mail.