What should you do if your employer’s request for information is overly broad?