By broad consensus, data security laws have failed to stem a rising tide of data breaches. Data security laws come in three forms: duties to protect data, duties to notify consumers after a breach, and post-breach remedies. Almost every data security law is enforced through sanctions, most of...