being a general method of information privacy protection, why isn’t it sufficient to go knowledge minimization and goal limitation restrictions that say businesses can only Acquire the data they require for your limited reason?  And that’s not likely an appropriate problem, for the reason