Data cybersecurity laws and regulations in the United States are fast-moving and ever-changing. There is a growing focus on cybersecurity governance, and companies increasingly need to assess their security and information practices to ensure compliance with emerging assessment requirements. These requirements will compel organizations to take a hard look at their cybersecurity and information governance practices. The failure to comply with these assessment requirements could increase the spotlight on a company should it suffer a data breach. It is imperative that companies understand emerging laws and regulations to which they may be held accountable and proactively modify their practices to manage risk.