All U.S. states require notification when data is exposed.

• A. True that every state requires notification.
• B. False that every state requires notification.
• C. Only some states require notification.
• D. Notification is optional in all states.

Answer: (A)

Data breach notification laws exist in every state, making notification when personal information is exposed a common obligation. Each state has its own specifics—what data triggers notice, who must be told (consumers, regulators, or both), and the timing of the notice (often within 30 to 60 days)—and some provide safe harbors, such as encryption, that can affect whether notice is required. Despite these differences, the overall requirement to notify affected individuals (and sometimes authorities) is present in all states. That’s why the statement is accurate.