Nobody should be allowed to hold this amount of sensitive information about customers without paying a large bond to hold that information. It's clear that these companies will not minimize their data collection since storage is practically infinite, so make it cost them so they have an actual reason to care.