More than half the retailers that collect information from consumers for promotions and marketing campaigns have assigned responsibility for protecting consumer-specific data to a security-program coordinator; an even greater number have provided training to employees regarding consumer privacy and information security. However, fewer than half of the 71 respondents to a survey by the Retail Systems Alert Group have a formal incident response plan for security breaches of consumer data—and a quarter of those never test their plans. @ The executive summary of the retail data security benchmarking study is at SM Online. [1]