Maybe barriers for personal information isn’t a bad thing? In order to store personal information, you should at least be competent enough to keep it safe. I don’t think having some kind of barrier is too much to ask for a company of any size to have to reach in order to show that they are competent to securely store the data.

I’m not saying the barrier should be great, but something (anything!) that makes keeping personal data secure a priority for a company is a good thing.

How many instances of this kind of lax security have we seen? Perhaps if there were a few extra hoops, then we’d not have seen as many.