Apropos of nothing, if you handle personal data for a company, remember:
If you do not hold information it cannot be stolen in a breach and you cannot be forced to divulge it to a hostile government