Chuck  Ross of Webb, Tanner, and Powell’s litigation group spoke to the Rotary group about security for their data systems.  He cautioned that it was not only big companies who suffered from theft of customer’s identification information but small companies must be cautious as well.  He listed the laws under which business owners could be held liable and the various dangers that exist, including not shredding, leaving information in the open, USB drives, and just plain stupidity.  He asserted that one might need a lawyer for protection and to develop a response plan if some breach does occur.  Questions arise as to whether a breach has occurred, what to do if it has, to whom it should be reported, and how to limit liability.