Our senior management wants to collect more Personal Identifiable Information (PII) from our customers in order to be able to sell more products to them. Which of these should be the MOST important when we decide how much PII (Personally Identifiable Information) we collect?