The massive data breach at Equifax has focused attention on the substantial risks for businesses that collect, store, use, and share personal information.