Instead, data breaches are addressed by a patchwork of state laws, setting forth various requirementsincludingnotification of those affected, and sometimes fines and payment for identity theft monitoring for breach victims.
The CARD Act changed the notificationrequirements for interest rate hikes, requiring that cardholders now receive 45 days notice on any increase, including default.