Also, whatever you assume, there are legal and moral obligations to protect information in any case.