Instead, data breaches are addressed by a patchwork of state laws, setting forth various requirements including notification of those affected, and sometimes fines and payment for identity theft monitoring for breach victims.

FORBES: How Do We Deal With Data Breaches?