Client-side encryption or a self-hosted version could be useful. I'm pretty sure I'm violating a privacy law somewhere when I keep student grades in a Dropbox folder.