Risk management

Companies are required to notify affected customers after a data breach. Here are a few tips for complying with state laws and avoiding potentially bankrupting expenses.