Despite increasing coverage of cases where personal information is stolen, often en masse from large companies, as well as new legislation attempting to limit how much personally identifying information (PII) companies collect to just what they actually need, I am still encountering places that are clearly asking more than they need, and providing no information about how they will protect the information they collect.