President Obama on Monday outlined a proposal that would require companies to inform their customers of a data breach within 30 days of discovering their information has been hacked. But depending on what is put in and left out of any implementing legislation, the effort could well lead to more voluminous but less useful disclosure. The plan is intended to unify nearly four dozen disparate state data breach disclosure laws into a single federal standard. Many states define personal information differently and hence have different triggers for what requires a company to disclose.”]
Source: https://krebsonsecurity.com/2015/01/toward-better-privacy-data-breach-laws/