Data ethics
Insider threats
Ineffective data disposal
Web-application vulnerabilities
Ineffective response planning
Unnecessary data collection
Unclear privacy terms and conditions
Session-expiration issues
Unsecure data-transfer channels