Bruce Schneier: Personal data is a toxic asset.

Just as in the case of toxic chemicals, we need laws to make the cost of the toxicity fall on the companies or government agencies that collect or accumulate the data. But that's not enough in the case of toxic chemicals, and it's not enough for toxic personal data either. We need to prohibit building systems such that they collect or save more that the smallest amount of data that they could collect or save.