13
Cybersecurity law, both in statutory and case law, is primarily based on the premise that data breaches result exclusively in financial harms. Intuitively, legal scholarship has largely focused on financial harms to the exclusion of non-financial harms— emotional and mental—that also arise from data breaches. A critical mass of research in psychology, psychiatry, and internet …