User data security is a breach – what would you add/remove from this guide?