In addition to being an embarrassment, a data-security breach has many potential legal implications under both federal laws such as the Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA) also may be implicated by a data-security breach, as well as the Federal Trade Commission's unfair trade practices rules.