The letter emphasizes the need to investigate the involvement of non-government entities in the collection of personal information