DataLossDB – Open Security Foundation: “In order to request data breach notification reports from governments, several critieria need to exist. The state must have Freedom of Information or Open Records legislation. The state must have Breach Notification legislation, and the state must require notifications to a centralized authority (like an Attorney General, or a Consumer Protection division). At this time, only 12 states meet the requirements for gathering Primary Sources. 35 states have data loss notification legislation, but no centralized reporting. 4 states have no data loss notification legislation. See our Federal Data Breach Notification Legislation page for our analysis of federal legislation.”