Security consultant says cost, legal issues not as daunting as you might think
Trying to keep up with customer notification laws is the real killer, compliance expert says