The prevailing assumption, that organisations should gather and store personal data, has been shown through the constant breaching of vast data stores to be catastrophically wrong. Our research examines the alternative: that individuals hold and control their own personal data on their own devices, and organisations request permissioned access to answers rather than copies of the underlying material (proof of being over eighteen rather than a full date of birth, for example). This removes the honeypot of centralised PII on which the industrial-scale fraud economy is built.