This is different because it concerns a government, but as long as the CEO doesn't go to jail for IT breaches (Sony,...) and grossly negligent IT decisions (Bri

This is different because it concerns a government, but as long as the CEO doesn't go to jail for IT breaches (Sony,...) and grossly negligent IT decisions (British Airways), nothing will change with data security. The second the law changes, CEOs will make it a personal matter sound decisions are made.