The First Amendment of the U.S. Constitution forbids Congress from making any law that could limit the free expression of religion, press, assembly or speech.
Companies need to apply security best practices, but they also should take the time to determine the financial impact of a breach to their organization.