Although 46 states, the District of Columbia and Puerto Rico have passed laws requiring consumer notification in the event of a security breach of personal information, recent large-scale and publicized breaches continue to make data security a top legislative agenda item in statehouses across the country. Of the 15 data breach proposals introduced by State legislators this year, two have been signed into law.