> if companies has a legal responsibility to protect their customers and provide safe products
Since 1 January there is also a law in the Netherlands that requires companies to report any data leaks.
https://www.government.nl/latest/news/2015/07/10/obligation-...