3. Don't expose yourself by accepting responsibility for sensitive data (that you don't even need, probably)

If you upload personal data (which, I agree, is wrong unless explicitly requested and authorized) you are having much more data to protect.