Tips to Protect Your Personal Information
This is a list I came up with originally as an email to a friend about things to watch out for and practices to use to help protect your personal information. Being a geek I think I take an understanding of some of these systems for granted. What is common sense to me is not common sense to some one less technically savy.
Anything you put on or transmit over (email gets transferred in the wide open) the web, whether you think it is private or not, you should treat it as if it it public information. You always need to be sceptical about giving out even remotely personal information online, over the phone, over snail mail and in person.
Here are some tips I would recommend as common practice.
1. Don't be afraid to refuse information in a situation where you don't feel they need it (i.e. when the people ask you for your zip or phone when you check out at a store).
2. Keep an alias. Get a free email account from GMail or something and make up information that provides no hints to your real information. So when a place asks you for your email address or something you can just give the alias instead of you real one. I also keep a fake phone number in my head so if I don't want to give my real one I have one ready.
3. Never trust anyone you meet online (in chat rooms and stuff) or in person for that matter.
4. If someone calls you claiming they are from an organization that you work with (i.e. your insurance, electric, etc), tell them that you will call them back with the number you have and know is good. Caller id can be easily faked and should not be trusted.
5. Never put or give any information online that you wouldn't give to strangers. For me that is basically anything I would put on a resume.
6. Keep track of what other people are putting about you online. All of these social websites allow your friends to post information about you whether or not you have an account yourself.
7. Don't trust the sender of an email, this can be easily faked.
8. Never send personal information over email. Any organization that asks you to do this is either security defunct or trying to scam you.
9. If you do manage important accounts online (like bank accounts), make sure you have a good password scheme. Crackers guess passwords in two ways: figure it out by learning your kids name, your nickname, your hobbies, etc or just guess every possibility (i.e. a, aa, aaa, aab, etc) and when computers can do millions of things a second, it doesn't take that long to figure out a 4-10 digit password. And also change these passwords regularly.
10. Also when managing online accounts be sure you are very familiar with how the website looks and works. One thing crackers try to do is trick you into putting your username and password into a site that looks like your bank. So make sure you know and verify what the url is of the login page (the https://mybank.com thing a the top). Also know what happens when you put in a bad password and try it every once in a while to verify that it acts as it should. These fake websites usually are very basic and if you take a minute to click around a little before you login you can usually tell it is not your real bank (although these fake website copies are getting more and more sophisticated).
I am sure I could come up with more, but this is a healthy start.

