Never store data you don't need

A website needs to know whether I'm old enough to buy wine. It doesn't need a copy of my passport. Companies keep collecting far more than they need, then act surprised when someone steals it. Here's how to build it better, and what to do if your data's already out there.