https://www.brookings.edu/techstream/to-enhance-data-security-federal-privacy-legislation-is-just-a-start/