It really depends a lot on the type of information you store on people. Is it very personal/sensitive? Is there money involved?