Five additional states have passed laws mandating that companies notify consumers when that company has lost the consumer’s personal data. Click on any state to see highlights from that state’s law. See the updates, including links to the full text of each law, here. In general, most state laws follow the basic tenets of California’s original law: Companies must immediately disclose a data breach to customers, usually in writing. In California, this is “as soon as possible, without unreasonable delay” Click on the flag over Washington, D.C. to check on the status of pending federal bills.”]