ABSTRACT
Because the storage or transmission of sensitive personal information creates a signi¨cant risk that stolen information will be used in the commission of identity the¢ or fraud, access device fraud, and other crimes, Congress and the legislatures of some states have enacted laws imposing criminal penalties against those who violate data protection regulations or standards.
