Designing and implementing data security gets a whole lot easier if you start the exercise with the question "Why the hell are we keeping this data in the first place?"