**HIPAA (health data):** Breach notification to affected individuals within 60 days. Breaches affecting 500+ individuals must be reported to HHS and the media. The HHS "Wall of Shame" publicly lists healthcare breaches. - **GLBA (financial data):** Financial institutions must notify customers of bre