one would think that a reasonable, modern country would have regulatory requirements for storing PII like that but alas we live in the USA [0]

[0] https://www.politico.com/news/2024/09/17/andrew-kingman-data...