Secure Form Foundations: How to Stay Compliant While Collecting Sensitive Data