. . . "Tax credits, liability protections for compliance with security best practices, and other tools could be used as incentives." .