Requiring customer information should be illegal