Your organization is likely required to disclose data breaches to the proper authorities in your state, but sometimes going one step further is just as important.