Which is a legislative or regulatory act related to information security that can be imposed upon all organizations?

A.
ISO/IEC 27001:2005

B.
Intellectual Property Rights

C.
ISO/IEC 27002:2005

D.
Personal data protection legislation

Explanation:
The protection of data and privacy falls under personal data protection legislation and guidelines. In addition, contractual stipulations with a customer may also play a part. Every organization should have a policy for the protection of personal data and this policy should be known to everybody who processes personal data.