In this paper, we discuss the impact data protection regulations and standards such as PCI and the Office of Management and Budget Personally Identifiable Information Guidelines which place new constraints on how data is stored, processed, and transmitted over email.