Many large website/organizations profit from selling passively gathered user browsing data/information to advertising agencies and other businesses. While most of this information is harmless and used to market products efficiently, some of the data can be extremely personal. As a country we have strict regulations on the way we transmit and share medical information. But through the use of cookies and passive data collection, companies like Facebook and Google can gather sensitive medical information. I'm proposing we classify such data as private and protected then make the act of passively collecting and selling such information illegal.