Not surprisingly, data breach and privacy legislation has garnered a great deal of congressional attention over the last few years; yet we still do not have one central federal law or regulation that governs all forms of PII. As a result, companies are faced with a patchwork of state laws with variances in applicability, safe harbors, enforcement and notification procedures and deadlines that make