What legislation is involved for security in a business and why is it important to have this?