not everyone is regulated by the FSA either - and no there is no rule to apply patches just because they exist

there is a rule to protect the data