> If we wanted to hammer out a quick and effective privacy legislation, it would be: you need a demonstrable reason to ask for someone's birthday
Not much help for the American cousins, but this already exists throughout Europe and has done for years .... its called GDPR.
TL;DR : If it is or it is tied to PII (personally identifiable information) you have to:
(a) Justify collecting it in the first place
(b) Justify storing it, and storing it no longer than necessary
(c) Obey with the "right to be forgotten" and delete it on request
Not much help for the American cousins, but this already exists throughout Europe and has done for years .... its called GDPR.
TL;DR : If it is or it is tied to PII (personally identifiable information) you have to: