Darrell Issa actually said...
You must do both, but certainly cannot fail to focus on those who prowl the Internet.
Context
Issa emphasizes the need for the FTC to address both inadvertent breaches and malicious data scraping.
05/14/2015