As such, the provider will attempt to limit their liability to the greatest possible extent. Their ability to do this will usually be subject to consumer protection laws. Industry codes of practice may also be relevant. In the UK, the banking community has adopted a code of practice, Good Banking , which addresses certain general issues relating to data security, primarily for the customer. Under common law, tortious liability arises because one party has been negligent in fulfilling its responsibilities towards the other party.
Integrity is one of the central principles of data security.
Past case law indicates that security procedures and techniques should be based on what is currently available, rather than simply following practice within a particular industry. The cost of implementation should also be considered in relation to the nature of the data being protected. In an electronic commerce environment, the implementation of data security standards may provide the functional equivalent of traditional legal actions. Digital signatures, for example, may function to protect message integrity, as well as legally binding the user to an authenticated message. Digital cash schemes obviously require appropriate authentication from the customer in order to release the funds held.