CPSC Data Breach: Requirements for Handling Sensitive Information