Hearing highlights obstacles Congress must surmount to enact a national data breach notification law. Congress must decide whether evidence of harm to breach victims is needed before requiring companies to notify consumers. Defining the type of harm that would trigger notification is difficult, and defining personally identifiable information is difficult. A federal law would supersede all or parts of the 47 state laws that require notification, a House hearing heard Jan. 27. Consumer protection activists contend a national law that pre-empts state statutes could weaken protections some states offer.”]
Source: https://www.cuinfosecurity.com/barriers-to-passing-federal-breach-notification-bill-a-7847