Lost, stolen, or inadvertently disclosed electronic or physical records containing the personal information of users, customers, or employees—not to mention trade secrets and intellectual property—implicate a web of state and federal laws and regulatory interest.