DQ1.2: Is it possible to fully protect individual privacy in consumer transactions while adequately preventing fraud and protecting retailers' other legitimate interests? If not, how can the law strike an appropriate balance (or can it) between these potentially competing goals