Mark Rasch writes: Imagine a company gets hacked and hires a law firm to manage the response. The lawyers coordinate the forensic investigation, determine which notification laws apply, and advise management about what to disclose and when. Months later, the notices arrive. The affected individuals sue the company and add its lawyers as defendants. Their...