Regulations to protect consumers

Research showed that companies would gather more personal information than they need unless policymakers set requirements for data protection. However, if regulators restricted data collection but ignored data protection, companies did not guard customers' data enough.

Data collection can be restricted:

• Regulators could impose fines on companies whose data were leaked.
• Policymakers could tax data collection and discourage firms from gathering optional personal information.