Almost every day we hear of some company that has been hacked. Information security is one of the preeminent requisites for any company that wishes to retain someone's personally identifying information. In fact, a company that retains a person's most sensitive information, such as their biometric or geolocation information, should be required to ensure that their security infrastructure is of the highest standard. Reasonable standards must be implemented and constantly updated to meet the security needs and expectations of consumers.