Keep on moving

Googling for information on using SSL for security and complying with the data protection act is (a) very boring and (b) very difficult because you get zillions of people's privacy policies. All of the official stuff I have found so far is maddeningly unclear, and even my bank just says "Yes, we use SSL, it's the industry standard."