Key Points

1. 1) Currently, each state is in charge of legislating its own data breach notification laws.
2. 2) Adopting a standardized federal data breach notification law would reduce regulatory burden.
3. 3) A federal data breach notification law could also provide valuable insight into improving our cybersecurity.