In the wake of multiple high-profile thefts of consumer information, the protection of personal data held in business databases has become a hot topic. Some legislators have introduced bills that would hold companies liable for inadequately guarding sensitive data as one way to encourage greater security. @   What is your view? Should a hybrid approach, like SEC filing, be sought? Should the government take stronger action, holding companies responsible for data breaches? Or should, in Crews’ words, “industry norms and practices…secure the ends that regulation can only mimic”? Technofile wants to know your opinion. E-mail your comments to ppiazza@asisonline.org [1].