Sounds like a potential compliance issue too, if you work with sensitive data.