Non-profits should exercise caution in securing personal information. For example, caution includes protecting digital records with a password and encryption and protecting paper records in a locked cabinet.