Witnesses testified about draft legislation that would establish national standards for data security and notification of a breach. Companies would be required to notify consumers and the Federal Trade Commission 48 hours after a data breach or face penalties. The talked about several recent data breaches, consumer confidence, and the breach notification process.