Security architect Peter Benson is concerned New Zealand’s proposed data breach disclosure regime isn’t strong enough.