Grounds for a fine or lawsuit. A complaint of negligence alleges that an organization had a duty to secure its data or follow relevant laws or industry standards, but failed to do so, and the failure caused harm to a stakeholder (such as customers or citizens whose sensitive data was disclosed, or shareholders who suffered a loss in corporate value).