Yes. And I do believe, unless I'm not correct, the current legislation puts that responsibility onto the employer or onto the business owner, and they are, under current rules, attempting to be able to protect that information as best they can.
When it comes to small business, the fact is that they don't collect a huge amount of information. The information they collect is from people they tend to know and know well. I believe the vast majority of them believe that is information that they are going to protect as best they can. They want to comply by the rules. They understand the need to protect personal information, because they themselves are consumers, and other business is going around everywhere....
I do believe they feel they have a responsibility, and they will do what they can to protect it.