NOTIFICATION OF DATA SECURITY BREACHES.

The article evaluates the two main existing U.S. legislative models regarding mandatory consumer notification. Model One, as reflected in the California breach notification statute, sets a low threshold for consumer notice and has the advantage of narrowing business discretion as to whether or not to notify consumers. As embodied in the Interagency Guidance, Model Two establishes two tracks for notification, thus, it has a high threshold for consumer notification and a low threshold for notification of the oversight agency.