“Data collection creates an inherent risk of data loss through hack, breach, or other forms of intrusion.”