Ben Ray Luján actually said...
So it sounds like what States have done, they have a reporting mechanism that when there is a breach in security and data is compromised, that they are required to notify the consumer that may have been impacted.
Context
Lujan discusses state requirements for notifying consumers about data breaches.
03/30/2009