We pay for the costs of defense and damages from your liability to a 3rd party for regulatory fines and penalties resulting from a failure in your security or data breach (subject to applicable law).