Ruth Promislow is a contributing editor to the Sedona Conference Commentary on a Reasonable Security Test, a project of the Sedona Conference Working Group on Data Security and Privacy Liability (WG11). The paper is open to public comment until November 18, 2020.
The commentary addresses what "legal test" a court or other adjudicative body should apply in a situation where a party has, or is alleged to have, a legal obligation to provide "reasonable security" for personal information, and the issue is whether the party in question has met that legal obligation.
A review of the paper in the National Law Review describes it as, "brilliant at articulating the problems raised by trying to find a 'reasonable' set of standards for companies to meet for legal compliance."