Hacked vs. Hacker: Game on (NYT)

Are there any laws actually governing what disclosures need to happen if an otherwise non-regulated company loses my data? (meaning not a bank or healthcare)