US Security Breach Notification Laws. This is not federal; 48 states have individual laws. Know the
one for your state (none in Alabama and South Dakota). They normally require organizations to inform
anyone who had their PII compromised. Many have an encryption clause where lost encrypted data may
not require disclosure.