After every major data breach, people wonder how secure their personal data is. They briefly panic about it, but within days they have forgotten. For companies, the story is similar. All too often, they are lulled into a false sense of security about their own data security policies.