If you're dealing with personal information you should always handle with conscious care and ensure it is only handled in a way that no data breaches are possible. This does include notifying your client that you'll be doing manual time for a task, or doing it on different hardware.