security

I created a user name password login web forms, for our students to enter information. And we may also use SSL to protect these pages.

I wonder if we want users to enter health inform, insurance info, or credit card info, is this OK legally or technically safe? Or there should be more secured system? if so what is it?

Or we should only ask users to enter basic info not information like health, credit card- or called Hyper-data?

Thanks

 
...