Limits on Private-Sector Collection and Use of Data Flashcards