“Businesses and governments are continuing to wrestle with the question of what can and cannot be considered ‘adequate’ IT security in compliance with regulations including data protection laws.”
OUT-LAW.com, 25th February 2013
Source: www.out-law.com