We really need to get used to treating PII as poison, storing as little of it as possible, and getting rid of it as soon as we're done with it.

I think we can treat it as currency. All nine letters of my SSN, for example, I’ll allow you to store those if in return I get to store the name of the CEO’s boat.