Yes, when they take our personal information they take with it he responsibility of protecting it. Of course they should have to tell us if our data is stolen, that's like asking "should companies have to take responsibility for their failures?" To which the answer is always yes. This rule wouldn't limit obstruct companies in anyway, the government would not have any more regulation and power over them, if they protect the data they are supposed to and do their jobs. This ideal applies to government as well, both the federal government and businesses should be held responsible for their mistakes. I see no defensible reason to oppose this bill, the only people that it hurts are the data hackers and those who would see the lives of thousands if not millions of innocent people ruined just so they could save face and money.