Key Federal Privacy Laws Do Not Require Information Resellers to Safeguard All Sensitive Data