New York state has jumped on the privacy-breach-notification-legislation bandwagon by passing the Information Security Breach and Notification Act. It looks like the moral equivalent of California SB1386. Presumably a lot of it will be superceded by the federal legislation coming up next year.