By changing the framing. Ask about how he'll feel when (not if) a bad actor gets his info? Steals his identity? Opens a credit card. Takes out a loan. Tanks his credit. His info is all right there conveniently compiled by unknown entities and data gets breached all the time. Enter his info into a website like https://haveibeenpwned.com/ and show him just how many times his data has already been compromised without his knowledge. Point out data security isn't JUST about privacy it's about DATA SAFETY.
By changing the framing. Ask about how he'll feel when (not if) a bad actor gets his info? Steals his identity? Opens a credit card. Takes out a loan. Tanks his credit. His info is all right there conveniently compiled by unknown entities and data gets breached all the time. Enter his info into a website like https://haveibeenpwned.com/ and show him just how many times his data has already been compromised without his knowledge. Point out data security isn't JUST about privacy it's about DATA SAFETY.