One of the most cherished values held by many individuals is the right to privacy. With the growth of ongoing data capture, some situations, run afoul of privacy considerations, given that substantial share of data captured and/or acquired by business organizations contains customer/client/patient details. Personally identifiable information (PII), which is defined as any information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context, is most highly regarded.

What legal and ethical considerations should companies consider, knowing a security breach could happen at any time?

Your responses must be detailed with examples, citations and references. Be sure to identify the source of your example in your posting.