Existing carrier practices and regulations are inadequate to stop this trade in personal information.