Six Considerations for Strengthening Information Security

3. Avoiding Unnecessary Risk. There currently are more than 20 states that have passed laws requiring disclosure when Social Security numbers or credit card numbers are compromised. Organizations don’t need Social Security numbers to accept donations, and since these are high-risk data items, don’t ask for them. Instead, create your own membership numbers.