Agree with this although I think certain industries are happy for it to be complicated and misunderstood (Lawyers and Consultancies). the key thing is do they need your data to perform their business, if this is the case then yes they have a right to hold your data and are then responsible for...