Creating criminal charges for failing to notify customers of a data breach ensures that businesses are good custodians of customer data.
Customers whose data is breached can already sue the entity that let their information be compromised in civil court. This bill is redundant and unnecessary.