Abstract
This piece addresses the implications of security breach notification laws for colleges and universities. In particular, the applicability of these laws to both public and private institutions, the compliance obligations imposed in the event of a security breach, and whether the obligations vary for in-state versus out-of-state students and employees.