Another new Arizona law (formerly H.B. 2116) prohibits a person or business from using more than five numbers that are reasonably identifiable as part of a Social Security number on any card that is required for the person to receive goods or services or on any materials that are mailed to an individual. The law is an expansion of a law approved in a former legislative session that prohibits the use of a person's Social Security number as an identifier for any commercial business.
A recent report jointly conducted by Experian and the Ponemon Institute surveyed consumers who were victims of data breaches. In the report, The Aftermath of a Mega Data Breach: Consumer Sentiment, 63 percent of consumers said they believe the company where the data breach occurred should be obligated to provide identity theft protection to affected parties, and 67 percent wanted compensation such as cash, products, or services.