This headline appeared in today's press:
Small businesses could be forced to protect customers' personal information, under government changes to Privacy Act
"They would have to have a privacy policy, they'd need to ensure that they kept personal information secure and delete it or de-identify it when it was no longer required for their purposes."
Note: Small businesses with a turnover below $3m are currently exempt.
We've been hit by a number of hacks on large databases such as Telco's, Medicare, and government departments and it doesn't look like stopping soon.
I avoid collecting information, but my sites do collect email addresses. If this legislation happens and spreads further afield, Cheetah may have to consider encrypting more than passwords.