About twelve years ago, when most people had never heard the term “data breach”, a colleague asked me what type of law I practiced. I tried to explain that I helped companies collect, secure, and share data, and, when data was inadvertently lost or breached, I helped them take steps to minimize any adverse impact. He thought for a while and said “what types of companies need to be worried about a data breach?” He was surprised when I looked him in the eye and said every company needs to be concerned about a data breach.