According to lawyers wirting in the Harvard Business Review, a data security regulatory system should:
- focusing more on systemic ways to address cyber threat
- not treat businesses punitively
- require the federal government to take a more active role in cyber defense
- require the federal government to share cybersecuity knowledge with the private sector
- require agencies to “issue pragmatic, cost-effective operational guidance to companies on how to defend against evolving risks”
- incentivizing security improvements
- provides greater confidentiality concerning security measures
- provide liability protections
- create a public-private collective cyber defense
Harvard Business Review | Stopping Data Breaches Will Require Help from Governments