What risks, if any, does offshore outsourcing of various information system functions pose to satisfying the principles of confidentiality and privacy? What do you think an organization's duty or responsibility to protect the privacy of its customers' personal information should be? Explain.