Data Security Breach Notification Laws
http://www.fas.org/sgp/crs/misc/R42475.pdf
This report provides an overview of state security breach notification laws that apply to entities that collect, maintain, or license personal information. The report also describes other legal responsibilities relating to health and business information. From the Congressional Research Service, posted by the Federation of American Scientists