A law that specifies a requirement for an organization to notify affected parties when they detect the loss of a specified type of information; may be state or local or part of an international agreement.