In a recent court case, one company that thought it was buttoned-up against ID theft ended up paying $550K to employees because of a security breach. That’s just one example of how new data security laws are raising the stakes for HR and IT.