Number: RS22374 Title: Data Security: Federal and State Laws Authors: Gina Marie Stevens, American Law Division Abstract: Security breaches involving electronic personal data have come to light largely as a result of the California Security Breach Notification Act, a California law that went into effect in 2003. In response to frequently occurring breaches of personal data, many states passed laws that would require companies to notify persons affected by such security breaches. By December 2006, 34 states had enacted data security laws. Numerous data breach notice and data security bills were considered in the 109th Congress, but not passed. This report provides a discussion of federal and state data breach notice and data security laws. Pages: 6 Date: January 12, 2007