Companies are often subject to legal requirements, which they are required to meet. An example is the Privacy Act, which places restrictions on how data is to be gathered, used and stored. It also provides guidance on security of data and procedures for protecting access to data.

(a) Explain why protecting data is an increasing challenge for organisations.

(b) Suggest organisational control activities that could be implemented to protect data. Illustrate your answer with examples