I'm not sure that criminal extortion is a great strategy to avoid civil fines, but I suppose as an individual you should just avoid giving your information to any business not large enough to have a CCO.