What are companies’ responsibilities in notifying people of a data breach?

The year got off to a bumpy start for two healthcare providers, Canopy and Manage My Health, after both had patient data stolen in separate cyber breaches.