A panel of WG11 brainstorming group members will lead a dialogue with all WG11 members in attendance on their outline on the topic. The brainstorming group was tasked with: (1) analyzing existing model data breach notification laws, proposed federal legislation, and how countries besides the U.S. have regulated breach response; and, (2) based on the analysis of data breach notification laws and the deep experience of practitioners, proposing a path forward for developing a model data breach notification law. The model law would aim to mandate the most practical and useful framework for data breach response.