Examines the policies of corporations such as insurance companies, banks, and credit card firms that regularly process medical, financial, and consumer data. According to Jeff Smith, many companies lack comprehensive policies regulating the access to and distribution of personal data, and where stated policies do exist, actual practices often conflict.