BUSINESSES LARGE AND SMALL are facing unprecedented liability and reputational harm due to cyber-attacks and data breaches. Financial institutions, private businesses, public agencies, and now the City of Baltimore have had their networks frozen by ransomware. In response to this, and to sweeping new data privacy laws in Europe, states and the federal government have pushed for new laws regulating data privacy.