Pressure is building on businesses to justify retaining personal data as consumer awareness of cyber security builds in the aftermath of the Optus, Medibank and Latitude hacks.