Failing to report sensitive data breaches to US regulatory and law enforcement agencies just got more dangerous and confusing for CISOs and their organizations. If that failure is seen as a coverup, such as paying ransoms for retrieving sensitive data, it could lead to steep fines or jail time. In a case that is playing out now, former Uber CISO Joe Sullivan was recently charged under an arcane, arcane law that goes back to 1789 called misprision of a felony. These cases will grind businesses to a halt as they feel compelled to report anything that might appear to be a data-related crime.”]