It seems this law is intended to benefit those with the most resources to implement the best security, leaving smaller businesses to pretty much pound sand.
We have arrived at why "a pretty basic backup" is no longer feasible for...any business. A hard sell for a four person business with no dedicated IT team.