There should also be measures such as raising awareness oftheproblem and good incident reporting that the Health and Safety Executive recommend should be in place.
Today, 44 U.S. states have passed breach disclosure laws that require companies whose cache of personal information is lost or stolen to publicize the incident, reportingtheproblem to the affected customers.
Without any real benefit stemming from the collection of this information, imposition of this reporting requirement seems to be a solution in search of a problem.