District of Columbia implemented privacy-related legislation that applies to residents or activities that occur within the state, including breach notification or other data security laws. Companies in District of Columbia must comply not only with applicable federal law, but also with relevant state privacy and security laws and regulations.