This is a problem, sure. Data storage where personal identifying information is concerned will always be a problem.
My biggest concern, by far, is: WHY WAS STORAGE OF THIS DATA DEEMED NECESSARY?
Just view ID and issue a member's card, or let visitors keep signing in on paper. There was never any need to scan in photo ID. None.
