A single stolen laptop, one employee clicking the wrong link, a vendor's system getting breached — any of them can put a Kentucky small business on the hook for notifying customers, restoring data, ...