Which of the following statements summarizes why a breach notification is hard for entities?

Question $3$ options:

Notices might look different depending upon the law that the entity followed in creating the notice.

States have different laws about what constitutes a breach.

People also may be confused if they get notices that don$$t look similar.

Not all states have the same penalty structures.