Problem 1 In the United States, there is no single, uniform law that governs disclosure of data breaches. Instead, most states have passed piecemeal legislation with various covered elements and disclosure requirements. Companies can be (and are) held to entirely different compliance standards depending on which state an affected individual lives in. Kentucky was one of the remaining states to pass such legislation. Reference: https://www.bakerlaw.com/files/uploads/Documents/News/Articles/INTELLECTUAL\%20PROPE RTY/2015/Haggerty-Patrick-Article-May-2015-Bench-Bar.pdf 1. Who are considered covered entities (information holders) under the KY legislation? Who are explicitly excluded? Why do you think that KY chose to exclude these entities