Yes, because how else are you to trust a online company with your information. If you ask a company what they do to protect your information they are not required to give you an answer but the government would require it.