Haven’t they heard about a thing called encryption? There should be draconian legal consequences for storing sensitive unencrypted data.