Except that the law doesn&#x27;t say &quot;Whatever the company <i>claims</i> is needed for their business&quot;. There are courts and judges who decide if a particular bit of information is actually necessary.