In Soviet Russia we tried vice versa: to operate farm as a state.

Even today every business entity has to have specific person responsible for accounting, fire defence, labor health, energy efficiency etc even if you have just 1 employee and he is business owner.

If you write customer name and birday somewhere (or name + almost anything), you have to sign with him additional agreement about personal data. There you have to specify how you will use it. If you get blood type or any other health info - you will have to certify your datacenter, use open crypto and have specific responsible employees.