In functional conditions, you should cut down usage of sensitive info and make anonymized copies for incompatible uses (e.g. analytics). You should also document a function/lawful basis before amassing the data and https://noransomattack.com