Re: Clearly allowing companies to hold this kind of information should not be allowed
"Then add in real punishments if they abuse the system or attempt to get around it by pressuring their customers for information unrelated to the transaction."
Why don't we go after the CEO, the Board of Directors, middle management and anyone else in the chain of command and personally make them responsible and paying for correcting the wrong, including prison.
This dipping into the company's petty cash to pay a fine is obviously not working.