Yes, but the American laws demand notification of consumers. Is that your question? Many of them do--they differ. If there's a security breach, the individuals affected have to be notified that this has occurred so they can take appropriate steps.
On November 22nd, 2006. See this statement in context.