In commercial contracting, bargaining parties regularly allocate risk in various ways, including contractual limitations of liability. However, it can be difficult to appropriately apportion responsibility for high-risk contingencies such as data breach. A seller may be unwilling to accept uncapped liability for a contingency whose cost could exceed the expected value of the transaction. Conversely, a buyer may be unwilling to live with only a general damages cap established as a rough-and-re...
