>>>You can just call it best practice and then it becomes legally enforceable.
>>
>>Yes, of course, this is a best practice. I am not much concerned about the "legal" side of the business.
>
>Yes, a best practice, but is it The Best practice? Somehow, by definition, I expect the superlative to apply to only one of each.
>
>The mention of legality is my private in-joke. So many laws here (and I guess elsewhere) were written in the last decades, where the standards were removed and replaced with "adherence to best practice" which is then not defined anywhere. Which then creates a no-man's land where anything goes.

A few days ago I attended a video conference with the director for the Norwegian "surveillance police" (in search for a better word/translation). His words were something like "we have to relate to analog laws in a digital world".