CEOs must personally involve themselves in security and...

CEOs must personally involve themselves in security and privacy. I think legislation in this case should be generally a last resort.