Organizations spend enormous resources protecting sensitive information. But before asking how to secure every piece of data, perhaps we should ask a more fundamental question: did we need to collect it?