Because they could cause harm to others
The individual who files a lawsuit against another party is the plaintiff, while the party the lawsuit is brought against is considered the defendant.
Information security policy (ISP) is the law that gives organizations and companies insight into the type of plans and policies required for information security. They go over data leakage, data breaches, snooping, and control to information.
I hope this helps! :)