“The bigger question I have is why is that level of personal data from a government given to a marketing analytics company? What purpose does it serve? The number one rule of data protection is to not have the data,” said Chris Morales, head of security analytics at Vectra.