A May 2006 data breach at the Dept. of Veterans Affairs (VA) & other similar incidents since then have heightened awareness of the importance of protecting computer equipment containing personally identifiable info. & responding effectively to a breach that poses privacy risks. This report identifies lessons learned from the VA data breach & other similar fed. data breaches regarding effectively notifying gov¿t. officials & affected individuals about data breaches. The author analyzed documentation & interviewed officials at VA & 5 other agencies regarding their responses to data breaches & their progress in implementing standardized data breach notification procedures. Includes recommendations. Charts & tables.