Also on the type of data. If you are using super sensitive data (eg health profiles/histories of people) you better not risk because you are gonna get hit hard.