If you are handling any kind of medical data about people, then you cannot think about security at a future date and your life will be difficult from the start.