The law pass this spring is aimed at making businesses and organizations more responsible for customer data they collect and keep.
