Data security: the devil is in the detail