It probably depends on the interpretation by the regulatory agencies. Often times business will do exactly or a little more than the regulatory agencies require whether or not it makes an moral or ethical sense. The Titanic actually carried an excess lifeboat capacity than required by the UK Board of Trade when she sailed in 1912. Obviously the regulations were outdated and inadequate. Probably have the same situation here; obsolete regulations being enforced with out review or revision. They will stay enforce until a massive enough breach forces regulatory or statutory changes.
Biting the hand that feeds IT
