After a breach of consumer data, the California Attorney Gen…
After a breach of consumer data, the California Attorney General files an enforcement action against XYZ, Inc., a Delaware corporation, for failure to follow California data breach notification laws. Which of the following is XYZ, Inc.’s best defense to the enforcement action?