Personal data including but limited to home address, HIPAA data, Social Security Numbers, bank and credit card numbers must be protected by organizations with over 1000 employees. If the data is not protected and is lost for any reason the organization becomes responsible for that loss with no exclusions and no liability limits



