Data Breach Notification Laws - The legal requirements for reporting and reacting to data breaches vary by state. This link will take you to the National Conference of State Legislatures, which has links to legislation relevant for each state.
DHS Privacy Incident Handling Guidance - The Department of Homeland Security provides some guidance to help you plan your responses to an incident. This document can assist you in establishing policies and procedures in order to handle a breach in accordance with legal requirements.
Office of Management and Budget Recommendations for Identity Theft Related Data Breach Notification (.pdf)
Data Disposal Laws - Laws relevant to disposal of any data containing "private" or "sensitive" information. This applies to any paper, electronic, photographic, or other media that contains private data.