A data breach has important implications both for the company that experiences it and for that company’s clients. Reporting breaches is a no-brainer – but the when, why, how and where of that report requires a little more nuance in order to maintain the fine balance between privacy and commerce, the Privacy and Access Law Section said in a recent submission.