We might assume that information gathered legally by a government agency, for instance, will be handled appropriately and used only for our benefit, yet there have been many examples of governments and private organisations losing confidential data by storing or transferring it insecurely