Not just the organizations that breach privacy; for instance, if it is Visa, then Visa would be obliged to tell me, if my card had been compromised, even if they fixed it and it didn't cost me anything.
Are we talking about the same thing?
On November 20th, 2006. See this statement in context.