Thanks for this thoughtful response bawolff. I need to digest it but you make good points that all tally with ny experience. Yet I remain convinced that a regul

Thanks for this thoughtful response bawolff. I need to digest it but you make good points that all tally with ny experience. Yet I remain convinced that a regulatory approach needs to include the end user as a firts-class stakeholder. How to do this without making the life of security professionals an untennable misery is where I want to focus. After all people look after their own money, their own homes and their own health. Why do we carve out an exception for their data? Respects.