The item that I find is this:

http://www.symantec.com/connect/blogs/backup-exec-2012-security-improvements

However, I am unaware of anywhere that the law requires this, where are you?

CEWII