Facing Inevitable Data Breaches And New Privacy Laws, Companies Shift Focus To Response