FTC urges caution in requesting and storing sensitive data

The Federal Trade Commission is recommending companies only ask for the personal data they need to serve customers, and that adequate protections be adopted for data “at rest” and when transmitted.

“One strategy is surprisingly simple. Hackers can’t steal what you don’t have, so collect and maintain confidential data only if you need it,” writes the FTC in a blog item posted Friday. “Asking customers for sensitive information on the off chance you might use it someday for something...