Dark Reading reported that "Data on 3M UK Drivers 'Lost in Iowa'."
I think this is an interesting disclosure, because most of the laws we see are of the form "if you disclose information about our citizens" rather than "if you disclose in our state." Sometimes, like with Choicepoint, this serves to get notice out. Other times, perhaps this being one of them, it acts as a loophole.
As Canada, the UK, and other places look to write new laws or regulations, it would be good for them to consider if they'd like to have laws which cover more breaches. It strikes me as a tremendously good idea.