Businesses and other entities can be found legally liable if the wrong parties have access to certain information. An example is when someone other than the patient or the physicians treating them has access to a patient's digital medical record. Also, critical data must be maintained. Data loss is another possible information security legal issue.