Since 2003, when California became the first state to require such notifications, 46 states and the District of Columbia now mandate that banks, retailers, health care providers, and other companies alert their customers when the company has lost their Social Security number or other private identifying information, due to negligence or theft.