Sec. 7.5. The division may initiate and maintain an educational program to inform consumers of:
(1) risks involved in a breach of the security of data; and
(2) steps that the victim of a security breach should take to prevent and mitigate the damage from the security breach.