Apps, websites and personal information storage

[User864753]

I'm separated and have filed for divorce.
My STBXH has no background at all in tech but has recently gotten really into AI.
He's designed an app and website. It calculates meat prices for farmers.
You can register on it by email and add your phone number to get alerts.

I know literally nothing about website and app design.
I have concerns that he's now collecting people's personal data and that there's a way it could go wrong and cost him money.
I don't even know what I'm asking really, but am I correct to have concerns?

He has about £200,000 in cash and shares and owns property. If we were divorced I wouldn't care about what he's up to.

Any business venture has risks in terms of investment and liabilities, so potentially there may be a situation that could affect him and his assets.

My first question would be, is the venture you mentioned being done as a limited company or as an individual?

So far as "collecting people's personal data", isn't illegal in itself, provided he is following the GDPR guidelines and understand his responsibilities as a data controller etc.

He must be doing it as an individual. He's not the kind of guy to engage with legalities. I doubt he's thought much about GDPR.

My son thinks his father is wide open to being scammed. He's been paying for online AI courses. Obviously all I can do is concentrate on the divorce, but it's another complication to his already very complicated finances.