How long a company has to notify consumers that their information has been compromised in a breach depends on where they live ...