What companies have to do if your personal information is breached

Requirements according to state legislation.