Abstract :
Whether it´s lost laptops, misplaced backup tapes, or data posted to Web sites, data spills have become a fact of life. In the US, state governments and federal agencies have responded with a series of notification rules, which require companies to inform the affected individuals after security incidents. Yet, to determine whether an incident affects individuals´ privacy and thus requires notice, organizations must uncover a fairly in-depth set of facts.
