More is better. From The Data Quality Act to SIPRNET, a large apparatus handles information. Except at the top.
CNET reports that a Superior Court Judge denied an injunction on Visa/Mastercard to tell California citizens the details of a security breach. In sum, the credit card numbers of 200k people had been stolen and as of yet those people are not required by law to be told. "There is no showing of an immediate threat," said the judge. Retailers and customers both could suffer if the CC's were used illegitimately. Question is, did somebody break in and scan 40 million CC's just for kicks
(IMHO not likely).
What is law in the metaverse?