46 states have enacted data breach notification laws. Congress also has shown no signs of reaching a consensus on a national approach. Leahy’s bill would require a business or federal agency to give notice to individuals whose sensitive personally identifiable information has been compromised within 60 days of the discovery of a data security breach. Lawyer Scott Vernick of Fox Rothschild says every lawmaker would say they believe in the need for a data breach law but can’t get their act together on the basic monetary policy, which can’t be done.”]
Source: https://www.inforisktoday.com/blogs/us-breach-notice-bill-wont-pass-p-1602