government should be looking towards legislating behavior, perhaps extending existing frameworks for fraud, trespassing and trafficking across state and national borders.
IT organizations must prepare to defend their security programs as states will surely continue passing versions of data protection and disclosure laws.