Ask HN: What are your concerns about about holding user data?

I am trying to understand how small and medium businesses are thinking about data security. Storing personal data has an associated risk. Data leaks can be harmful for your reputation. Customers can be put off your product when asked to provide data consent. Finally GDPR has financial consequences for failing to protect data properly. My questions are: What is your approach to data security? are you using external services, have you got legal advice. Do you think how you handle data will affect your customers opinion of your service product? Does the operation of your business rely on knowing personally who your customers are? For example flights require passport information but twitter doesn't need to know anything about you.