This article address the potential consequences of the proposed legislation requiring U.S.-based tech companies to report the loss or theft of personal information to the E.U.