That last comment went way over your head, AIDU. A suitable system, might for example, limit the number/age/type of records that could be downloaded, and prevent the download of personally sensitive data.
It might even ensure that that no or little personal data was held on a laptop, but viewed and manipulated over a secure link. It might also be fully encrypted, which seems not to be the case here.