Data breaches can rob retailers and other businesses of consumer confidence and impose a variety of mitigation costs, such as consumer notification. Congress is currently considering whether to enact a federal standard that would (a) establish a comprehensive federal obligation to protect consumers following data breaches; (b) preempt state data-breach statutes; and (c) preempt state common-law claims alleging deficient data- breach notification based on negligence or other theories of liability. . . WLFPreemption1