There's a lot of media coverage right now about data breaches that happen at corporations, medical facilities, and even colleges and universities. It seems that nearly every day a new breach is reported. And security proponents are screaming for new legislation to help curb the number of data breaches taking place.

The idea that legislation will cure the breach problem leaves out one small factor -- people. A recent data breach at the University of Utah is a prime example. The breach happened because a third-party employee didn't do his job as he should have. It's that kind of human carelessness that causes most data breaches, and no legislation can curb that. Instead, it takes thorough staff training, and consistent performance monitoring. And that need to come from the organizations, not legislatures.