The Bottom Line While there are more laws that require companies to implement reasonable security practices, the Act is the first U.S. law that provides this type of safe harbor to companies that do so. Therefore, every company should implement a comprehensive written information security program, Continue Reading