I believe there's responsibility on the business side and on the consumer side. I believe a small business owner collects information that they need to do a transaction that is being demanded by the consumer, and they will use that information to transact that particular service or product. If you start putting limitations on the information they can collect, they may not be able to provide the services or the convenience the consumer demands. I think that's a challenge. I believe most businesses feel they have the responsibility to protect that information. I think we need more time with the current law and education to make sure they understand their responsibilities in doing that.
But I think consumers have a responsibility--and that's where the education component becomes so important--to also know what information to give out and what they perhaps should question. I believe that is also a part of this.
But I do think it's important not to sit there and try to define every piece of information that a business can collect. I think that's a difficult thing to do, because consumers are demanding certain types of information, and it could limit a business's ability to provide the service and may even scare them from providing that service because they can't ask for the information that they need.