The U.S. House of Representatives has approved legislation creating a nationwide federal data breach notification law. It will require organizations that maintain personal information to establish a data security policy, identify an information security officer, and have a process for securely destroying data and monitoring for breaches.