Open Disclosure Laws

I am a huge fan of laws like California’s requiring the disclosure of unauthorized access to personal information. Disclosure laws like this, rather than mandates and voluntary codes of conduct, would work wonderfully to improve data security. What company wants to send letters to their customers informing them they lost control of personal information like address, credit cards, and other key items?