Companies could be held liable in the event that there is a data breach, caused by an employee.