Should companies be required to notify customers before sending personal information to a foreign country?