Please follow
http://business.ftc.gov/privacy-and-security/data-security
.