Comment Re:Wrong Question (Score 1) 505
This may change over time. Red Flag rules and other identity theft laws in the US are increasing the liability for whomever is the source of the leak. Holding on to personal identifiers for people you have no active business with is increasing your corporate risk. At some point, most likely after an embarrassing information leak, a bunch of lawsuits that crush a company will cause others to reconsider not purging old information from their databases.