An expanded data breach definition and the telcos’ desire to link notifications to “concrete harm” are among the most controversial aspects of the proposed FCC data breach reporting rules.

Personally identifiable information relating to members of Congress and their staff may have been exposed in a data breach incident.