Information Security Laws or Privacy Laws - What is appropriate Security?