I like the analogy of data as oil: polluting when it gets out.

I'd like to severely limit the amount of PII on the system.