@david_chisnall As long as you are still storing that data *somewhere*, you have the security and legal problem (#GDPR ).
But yeah, *how* it's done can drastically alter the risk management for it.
I'd think of dietary prefs as passwords - hashes, with just a sprinkle of salt, not too much.

@subm3rge If you're storing them in one place, the compliance is much easier. In particular, when the employee leaves it's automatically deleted when their account is GC'd, whereas emails that they sent are not deleted from the recipients' mailboxes. The things that are retained about departing emplotees are things for which HR demonstrates legitimate interest (i.e. things that they'll need to present if audited later).