Legal Requirements For Security And Confidentiality Of Information