1. In any case, a plaintiff must establish standing to sue. That means they must have suffered an actual harm and the harm must be redressable. Think about why this standing requirement exists. Should cases involving a data breach be dismissed when plaintiffs can't show that the breach caused actual harm?

2. Do you think the United States should have one federal data breach notification law that supersedes state law? What are the advantages and disadvantages for having one national standard? Explain your answer.