Disclosing Personal Information

I find more and more companies attempt to get as much personal information on me as they can.

I also find more and more companies mishandle the personal information that they have collected.

I just got a letter today from a transfer agent one of my previous employers used; apparently they “lost” a data backup set that contained my personal information, of course they assure me that there’s little chance of any of my personal information being misused.  And offer to reimburse me for any expenses I might incur in obtaining a credit report, monitoring my credit, freezing access to my credit history — but I didn’t see in there any offer to compensate me for my time, or any loses that I might incur.

I think I’m just going to write them back, thank them for advising me of this information, and tell them that they may hire someone to manage and monitor misuse of information which they lost (most likely negligently); but that I will not incur any costs of money or time taking actions to protect myself from this incident, but I will hold them liable for any and all actual, consequential and potentially punitive damages should information they mishandled be used in any illegal activity.

My advice to companies that collect personal data is that they purge any at all personal data they have at the earliest possible time that they can legally do so.  Failing to take such action makes companies that maintain personal data liable for an unauthorized disclosure of information; and I would say potentially criminally negligent.

Originally posted 2009-01-18 01:00:44.