At this time, I don’t collect any data beyond names and emails of people who subscribe. I follow any regulations required by PIPEDA: The Personal Information Protection and Electronic Documents Act in Canada and PIPA: Personal Information Protection Act in Alberta.
If I sell my art at some point, I will Payment Card Industry Data Security Standard (PCI DSS).
Data security is enormously important to me and I certainly have no interest in helping the tech corporations and governments with their data vacuuming work.