A panel will lead a dialogue with all members in attendance on a draft of a Commentary with principles that is being developed to guide the development of data breach notification laws. Drawing upon best practices in data privacy and incident response, the Commentary and principles will describe how data breach notification laws should address different aspects of data breach notification, including what constitutes a notifiable breach, what methods of notification should be permissible, and whether there should be timelines for notification.