How about a law that requires notification from the company if your data is given to anybody for any reason? I'd include potential security breaches in this.

How about a law that requires notification from the company if your data is given to anybody for any reason? I'd include potential security breaches in this. This stuff isn't one-way, there have been corporations which have volunteered information and just handed it over when asked. As I understand these laws, they cover when the Feds can force the release of information and they presume that the companies all don't want to release it. I think that is generally true, especially for your larger companies, but not always a truth. The user should be notified of all releases of information to any party unless a FISA type warrant is presented.