Re: Law/Theory vs Practice
"Do I trust the party to keep data safe (and am I convinced that third parties cannot lay hands on it -- like in the US)?
If it's anything short of a yes, we're not going to do business together, regardless of what the law says."
Agreed. The law is a fall back position but shouldn't replace due diligence on suppliers (and customers for that matter) or common sense.