Ostrich-minded security, an unintended consequence of GDPR and CCPA, increases cyber risk. Some potential buyers of security technologies may decline to purchase technologies that detect data breaches because if they dont know of a breach, they believe they can avoid penalties. Such a strategy dooms companies to major breaches and potentially massive fines. Anyone can opt out of having their data shared or sold, everyone has a fundamental right to know where their personal data is and with whom it is shared, and protection from companies who inadequately protect their data.”]
Source: https://www.csoonline.com/article/3286620/the-ostrich-security-strategy-is-now-very-risky.html