How BYOD puts everyone at legal risk