https://www.brookings.edu/blog/techtank/2019/12/18/companies-not-people-should-bear-the-burden-of-protecting-data/?utm_campaign=Brookings%20Brief&utm_source=hs_email&utm_medium=email&utm_content=80990188