- Thinking on these laws is backwards. Laws should switch from punishing coporations to realizing in data breaches, companies are most likely also victims of criminal activity
- it is not a fair framework to punish companies
- and it is not effective enforcement
- Limited cyber experts. It is impossible for “every company in America to have sufficient internal cyber expertise to manage the risk.”
- The robbery analogy. When a bank is robbed, do we blame the bank? No.
Harvard Business Review | Stopping Data Breaches Will Require Help from Governments