There are, quite rightly, strict rules about how companies handle personal data (and that includes not transferring it to jurisdictions where those rules don't apply). I don't think any of those rules apply to individuals handling their own personal data.