One of the most unsettling impacts of data breaches is that often consumers, and even the entities whose systems have been breached, have no idea of the extent of the breach or the likely damage that may flow from the breach. Can you think of any ways that the law could more effectively address these problems? Are these issues better resolved through technological developments and market practices?