46 states have enacted data breach notification laws. The states can’t agree on what should be in a notification law. Congress has shown no signs of reaching a consensus on a national approach to cybersecurity. The latest version of the Personal Data Privacy and Security Act is introduced by Sen. Patrick Leahy of Vermont. Leahy’s bill would require a business or federal agency to give notice to individuals whose sensitive personally identifiable information has been compromised within 60 days of the discovery of a data security breach. Lawyer Scott Vernick of the law firm Fox Rothschild says virtually every lawmaker believes in a national data breach law, but such support doesn’t assure passage.”]
Source: https://www.cuinfosecurity.com/blogs/us-breach-notice-bill-wont-pass-p-1602