States passed data breach response laws, requiring reporting and imposing liability on companies under certain circumstances in event of a breach of data security.Business should not presume complying with federal law ensures adherence to a potentially higher state standard,