Am I liable if my users’ data gets breached?

I'm not looking for any conclusive legal advice, more so just curious how privacy laws apply in the context of home servers since I can't find anything on the matter.

If my home server containing the personal data of friends and family is breached, am I liable to be sued?