Congress is going to examine one more bill called the Data Accountability and Trust Act. Although the legislation require companies whose data is compromised to notify each individual affected in writing, it has very weak “security breach" definition that leaves up to the data companies to decide if they should inform potential ID theft victims about the incident or not.
