Not saying this doesn't have customer service ramifications but I think it should be best practice to purge customer information (Name, ShipTo, Payment Info, etc...) after the order has been delivered and closed. By no means is this a full proof solution but does limit sensitive data.