We need to update the fair credit reporting act with a data retention and opt out section for online activities. The key would be making the violations punitive enough that only crooks, and not these supposedly respectable corporations, would be willing to abuse.