We continue to hear about security breaches through the newspapers however it's important that consumers understand that each state has instituted policies that provide information about when notification must be made to consumers. You may have thought you would be notified if and when your data is lost, but depending on where you live and how many records were lost you may not be notified.
Just this year alone 32 states have introduced legislation related to improving breach notification including the protection of student data and health information. Residents of Virginia benefit from HB 2350 signed into law on March 23, 2015 which requires schools to implement policies and procedures to protect student data and systems. It also requires that a Chief Data Security Officer be designated to assist the schools. However, HB 2362 failed which required the Chief Information Officer to develop policies and procedures to ensure prompt breach notification when the responsible party is the state.
Read more about how your state is working to try to protect you at: http://www.ncsl.org/research/telecommunications-and-information-technology/2015-security-breach-legislation.aspx