Businesses that operate across U.S. state lines must comply with multiple state consumer protection statutes. In the past two years, attorney general offices from multiple states have worked together to pursue companies for data breach violations, resulting in settlements with a number of companies. Eric Langland, in this Privacy Tracker post, offers a survey of the data security requirements handed down in these settlements, writing, "In the absence of uniform state or federal laws mandating data security measures, the settlements are the best indicator of what state authorities expect from a company vis-à-vis its data protection measures." 
Full Story