Is a business required to provide a financial incentive in order to collect a consumer’s personal information?