What is the extent of the responsibility we should expect from those who safe guard our personal data? Where do we draw the line and say, at this point the protective measures taken to protect our data can be considered reasonable and appropriate? What do you believe?