Which two of the following statements about data protection legislation are true?
A. Deals with industrial espionage between competing companies.
B. Can result in litigation if personal data is not adequately protected.
C. Means that personal data must be stored for certain period of time.
D. Ensures that laws about data security are the same in every country.
E. Obliges organizations to protect confidential data within their control.