Data breaches are pervasive in our society and show no signs of regressing.

U.S. federal and state lawmakers and agencies have responded to cyber threats by passing breach notification laws and promulgating rules dictating cybersecurity protections companies must have in place. The New York State Department of Financial Services, for example, released its Cybersecurity Requirements for Financial Services Companies that contain broad and prescriptive cybersecurity requirements.