Scary stuff! Well for me anyways. As a security geek with a technical background the legal, regulatory, privacy, and liability issues revolving around Information Security are quite daunting. They speak a different language and have completely different concerns. For todays tips can you let us know what are the issues you are facing? Which laws or regulatory compliance are you facing? How are you dealing with them? Are they distracting you from doing actual security work? Are you dealing with attempting compliance with conflicting and vaguely worded interpretations of statutes and industry regulatory bodies?

Cheers,
Adrien de Beaupré
Bell Canada