Gina Stevens, Data Security Breach Notification Laws (CRS Report R42475) (Apr. 10, 2012) (full-text).