Storing personally identifiable data about people is covered and controlled by EU Data Protection law. Broadly, you have to have a legitimate, legal, proportion

Storing personally identifiable data about people is covered and controlled by EU Data Protection law. Broadly, you have to have a legitimate, legal, proportional reason for storing personal data on people. You probably need their consent.