Businesses and governments are "grappling with how to set boundaries while staying competitive in the technology transformation race."

Research suggests S&P 500 companies have a 1-in-28 chance of being hit with a federal securities class-action suit this year.

Reporting cyber incidents within 4 days will require cooperation among third-party service providers that may not yet be prepared.

If companies make disclosures in a big rush, as required, they may end up going public about cybersecurity incidents before they fully understand the situation.

These changes radically shift the legal landscape for companies and make it much easier for unions to organize.

Some overzealous programs could be viewed as giving a discriminatory preference to a particular minority or group, potentially leading to lawsuits from conservative activists.

"For the first time in U.S. states, companies will need to collect meaningful permissions from their customers to gather and apply data relating to the customers' position on the globe."