It is time for us to declare war on identity theft and online fraud.

Without there being some type of limit that is placed on that, I think it places consumers at significant risk.

Since we first started this process 6 years ago, 46 State laws have emerged.

I would also like to emphasize that providing prompt notice to the FTC is also very critical.

I thank the gentleman and want to thank him very much for pointing out the few bracketed points in the legislation.

Should the FTC have the ability to modify the definition of PDI?

Do you think encrypted data that is breached should require notification?

Should information made available by Federal, State, or local governments in accordance with the law, and thus otherwise be publicly available, be considered personal information?

Should all entities, regardless of their size or the scope of personal data they hold, be subject to the same data security requirement rules for section 2 of this legislation?

Should State attorney generals have the ability to enforce this law?

Do you believe political campaigns should be covered as well?