An excerpt fromWho Knows: Safeguarding
Your Privacy In a Networked World, 1995.
by Ann Cavoukian and Don Tapscott
Published, Random House, Toronto, ON, Canada
Republished with permission

Question why people want your personal information. Ask why they want it and what they will do with it. Reject rote answers such as "We've always asked for it," or "It's company policy." These are not acceptable answers; they are simply pat phrases that have little meaning. If the person doesn't know why the company needs your information or what they plan to do with it, ask to speak to someone who does.

• When you are satisfied that your personal information is being collected for a legitimate purpose, give only the minimum required. For example, you may need to fill out a product warranty card to ensure that your product remains under warranty for a period of time. But you don't need to provide any additional information that may be sought for marketing purposes and is unrelated to your purchase. Think first: how are such things as your income, occupation or date of birth related to a product warranty?
  
  
• Ask who gets to see your personal information. Will anyone outside of the organization have access to it?
  
  
• Challenge the sale, rental or exchange of your personal information to third parties for secondary uses beyond the immediate transaction.
  
  
• Look for an opt-out box on any form seeking your personal information. If you don't want your information added to mailing lists or passed on to third parties such as direct marketers, check it off. If you can't find an opt-out box, create your own. Simply add a sentence stating that you don't want your information sold, rented, or exchanged with other organizations for purposes beyond the immediate transaction.
  
  
• Beware of free coupons, special rebate offers or contest forms. These popular marketing techniques are often used to obtain a wealth of personal information. However, you may wish to receive these special offers. In that case, give the company only the information needed, and ask who will have access to your information.
  
  
• Whenever possible, pay with cash. This will minimize the amount of information circulating about your likes, dislikes, purchases, reading habits and so forth. New developments in the area of stored value (cashcards) and digital cash will make it easier in the years to come.
  
  
• Do not give your social insurance number or your social security number unless it is required by law or legitimately needed. Challenge any denial of service when you refuse to give your number. Talk to the manager and protest against the practice of routinely asking for your number. Threaten to take your business elsewhere.