Is collecting, storing and securing vast troves of data still the prudent move as cyberthreats abound, or is 'overcollecting' resulting in overexposure?