I'm giving you sensitive personal information.

Are you complying with current UK / EU laws about how you handle that data? Will you be compliant with GDPR when it comes in?

https://en.wikipedia.org/wiki/General_Data_Protection_Regula...