Best Practices for Avoiding Data Breach Liability