Kathleen Ann Ruane, Selected Federal Data Security Breach Legislation (CRS Report R42474) (Apr. 9, 2012) (full-text).
A combination of a lack of a comprehensive federal law addressing security breaches involving personal data and the difficulty industry participants report in complying with various state laws have led Congress to propose a number of bills that would require private actors and government agencies in possession of personal data to report breaches of that data. The bills have similar structures and elements. This report analyzes the bills, discussing their similarities and differences.