There are government agencies that can give you a smack down for mishandling PII even if you&#x27;re not hacked. They do do audits now and then although from what I&#x27;ve heard they are a little stone age in their methods and might not catch on if you&#x27;re doing something shady unless it&#x27;s obvious.