What legal considerations should I be aware of when outsourcing IT services?