Are there any security considerations?

After you have exposed data via Web Services, any client consuming the Web Service you are publishing has access to that data. If there are certain fields that you want to restrict from specific clients, create a different Web Service with those fields removed and have these clients consume that data.