Data storage โ legal liability. GDPR, CCPA.
Personal data
Name, phone, email, IP, address.
Principles
Minimum, purpose, time-bound, consent.
Encryption at rest
MySQL TDE, bcrypt passwords.
User rights
View, delete, correct.
Breach โ 72h
GDPR notify.