Risk allocation provisions relating to privacy, data security, and confidentiality deserve careful attention. These are not regulatory issues; rather, they are commercial issues indicative of the leverage and relationship between the parties. Among these issues are:
(1) whether damages for violations of confidentiality, privacy, and data security obligations are unlimited or capped by