Some members of Congress have been pushing for a nationwide data breach notification law. The U.S. has a patchwork of state laws that dictate when and how companies need to disclose a data breach. The SolarWinds supply chain attack in December 2020 provides a model for how prompt breach notification should work. A panel discussion at RSA Conference 2021 debated what such a law might include at a panel discussion. The panelists declined to endorse any specific proposals because a formal bill has not yet been introduced.”]
Source: https://www.bankinfosecurity.com/what-would-national-data-breach-notification-law-look-like-a-16697