Avoid Fines: Know the Laws That Apply to Password Management