Cyber security law will change how businesses operate