State data breach notification laws generally $$

require entities that have suffered a data breach to notify customers or other affected parties of the security breach

require entities that have suffered a data breach to confidentially notify the state auditor general

require entities that have suffered a data breach to conduct a secret data system audit

apply only to private entities and not to governmental entities