Safeguarding PII may not always be the sole responsibility of a service provider. In some cases, it may be shared with the individual. Cybercriminals breach data systems to access PII, which is then sold to willing buyers in underground digital marketplaces. For example, in 2015, the IRS suffered a data breach leading to the theft of more than a hundred thousand taxpayers’ PII. This law regulates the collection, storage, use, and disclosure of personal information, whether by the federal government…
