Check out my contribution to a roundtable on Electronic Information Management in the April-June issue of Risk & Compliance Magazine.  My key point is a simple one:  "The risks of Big Data should never cause you to shirk from making a deliberate decision to collect data that’s valuable to your business.  But collecting and keeping data reflexively or unintentionally is dangerous."  Unfortunately, I've seen companies keep data longer than needed just because the risks weren't on their radar.  And then I saw hackers selling that data.  Bad news.