If the business organization is involved in commerce that in the medical or investment
fields, then there are state and/or federal laws that govern data security and personal
information protection.
Regardless of the law, I doubt your company's CEO wants his company to be the next
one reported on the Nightly News for allowing sensitive data to be let loose.
http://pcworld.about.com/magazine/2105p022id110012.htmhttp://www.pogowasright.org/