What works? How would we know? As states pass new cybersecurity and privacy legislation, natural experiments present themselves that allow us to start measuring policy efficacy. One measure of this efficacy is the number of reported state data breaches. More and more states have modified their...