Data breach notification laws in the United States mandate firms to take remedial actions when consumer data is compromised. Interestingly, the policies contained within these laws vary by state and by year of law enactment. We investigate the effects of the various policies to determine how...