Bruce Schneier's latest Cryptogram newsletter leads with a stirring editorial about the erosion of privacy and the difficulty for average people to address it.
My wife needed a prescription filled. Her doctor called it in to a local pharmacy, and when she went to pick it up the pharmacist refused to fill it unless she disclosed her personal information for his database. The pharmacist even showed my wife the rule book. She found the part where it said that "a reasonable effort must be made by the pharmacy to obtain, record, and maintain at least the following information," and the part where is said: "If a patient does not want a patient profile established, the patient shall state it in writing to the pharmacist. The pharmacist shall not then be required to prepare a profile as otherwise would be required by this part." Despite this, the pharmacist refused. My wife was stuck. She needed the prescription filled. She didn't want to wait the few hours for her doctor to phone the prescription in somewhere else. The pharmacist didn't care; he wasn't going to budge.
I had to travel to Japan last year, and found a company that rented local cell phones to travelers. The form required either a Social Security number or a passport number. When I asked the clerk why, he said the absence of either sent up red flags. I asked how he could tell a real-looking fake number from an actual number. He said that if I didn't care to provide the number as requested, I could rent my cell phone elsewhere, and hung up on me. I went through another company to rent, but it turned out that they contracted through this same company, and the man declined to deal with me, even at a remove. I eventually got the cell phone by going back to the first company and giving a different name (my wife's), a different credit card, and a made-up passport number. Honor satisfied all around, I guess.
