You work for a local company that sells and manages data security for small businesses in Minnesota and Wisconsin. This company sells security software, hardware encryption, and hosts secure servers for Internet transactions. Your company also stores customer data including TAX-ID numbers and bank accounts. As your company grows and tries to compete with the larger companies like IBM or Microsoft, your boss asks you to discover new ways of generating business. One idea you have is that you could go through the data of your small business customers and find out who they conduct business with such as other companies or even consumers like you or me. Once you identify these potential new customers, you could then market your services to them. You also don't think you need to notify your existing business customers since you are already protecting their data and housing all of their information
Do you have a legal obligation to notify your business customers that you will be using their data to help your company grow? Why or why not?