Michael Burgess actually said...
Every entity that has a significant breach of sensitive data should have an obligation to make that fact publicly known.
Context
Burgess emphasizes the importance of public notice for data breaches.
03/17/2015