Introduction
In the past few years, there have been global stories about the Snowden disclosures and the NSA reports on government mass surveillance, the Apple-FBI controversy, and the WhatsApp-Facebook data exchange agreements. Information and Communication Technology (ICT) has revolutionized how we deal with information, do business, communicate, and interact with each other or with computers. Yen, in 2002, defined cyberspace as “the virtual space created by operation of the Internet, a network of computers that share information.” In this virtual cyberspace, interconnected computers, computer networks, and devices exchange, store and process massive amounts of personally identifiable information (PII) about individuals. PII includes social security number, name, Birth Details, parents’ names, biometric records or any other information connected to a person, such as medical, economic, educational, and employment information (NIST, 2010). Various organisations in cyberspace routinely store sensitive PII of their clients. In several cases, these organisations have either been careless in handling this information or have collected and used it as a commercial commodity.