Consumer information protection policy