Identity theft is a significant problem in need of federal legislation. Any standard for breach notification must be uniform and therefore national. This study examines the challenges of establishing a national standard.