Just as PCI created an incentive for retailers to get out of the business of holding credit card numbers, California's new law, and the GDPR-like implications it could bring to all of the US, might just incentivize retailers to get out of the customer data business. Impossible you say?
Please to comment