Legislative Roundup: New Laws Passed in Arkansas, Oklahoma, and Maryland That Revise Cyber Security Measures

Steven Erkel and Kaeley Brown of Alston & Bird write: Arkansas In April, Arkansas’ Governor signed H.B. 1943 as Act 1030 expanding the scope of personal information, as used in the Personal Information Protection Act, to include “biometric data.” T… Continue reading Legislative Roundup: New Laws Passed in Arkansas, Oklahoma, and Maryland That Revise Cyber Security Measures

Georgia Supreme Court Clarifies There Is No Duty to Safeguard Personal Information from a Data Breach

Gavin Reinke of Alston & Bird writes: The Georgia Supreme Court recently issued a decision holding that there is no duty to safeguard personal information from a data breach under Georgia law.  Georgia Department of Labor v. McConnell involved the … Continue reading Georgia Supreme Court Clarifies There Is No Duty to Safeguard Personal Information from a Data Breach

Washington State Lawmakers Reach Deadline Without Passing Privacy Act, But Reach Agreement on Amendments to Breach Notification Law

From Covington & Burling: The Washington Privacy Act stalled this April in the state’s House of Representatives, and will likely not reappear again for discussion until the 2020 legislative session. The bill overwhelmingly passed the Senate, but fa… Continue reading Washington State Lawmakers Reach Deadline Without Passing Privacy Act, But Reach Agreement on Amendments to Breach Notification Law

North Carolina’s Much Anticipated Data Breach Notification Law Amendment Moves to General Assembly

Joseph J. Lazzarotti and Maya Atrakchi of JacksonLewis PC writes: The much-anticipated amendment to North Carolina’s data breach notification law that we reported on earlier this year (see here) has finally been introduced to the state’s General Assemb… Continue reading North Carolina’s Much Anticipated Data Breach Notification Law Amendment Moves to General Assembly

Washington AG Ferguson bill strengthening data breach laws passes Legislature

From the Washington Attorney General’s Office yesterday, a press release on an expansion of the breach notification requirements. Of special note, under the new law, a hacker acquiring a name in combination with a student ID would trigger notific… Continue reading Washington AG Ferguson bill strengthening data breach laws passes Legislature

PA: Bill Targets Data Security of State Agencies, Municipalities and School Districts

Thomas S. Markey writes: On Feb. 19, a bill was introduced in the Pennsylvania Senate proposing to amend the Pennsylvania Breach of Personal Information Notification Act to add new breach notification requirements for state agencies and political subdi… Continue reading PA: Bill Targets Data Security of State Agencies, Municipalities and School Districts

Happy First Day of Spring! Ohio Insurance Law Effective Today

Amber Thomson, Liisa Thomas, Elfin Noce, and Kari Rollins of SheppardMullin write: Ohio recently followed South Carolina as the second state to adopt cybersecurity legislation modeled after the NAIC’s Insurance Data Security Model Law. The Ohio law, Se… Continue reading Happy First Day of Spring! Ohio Insurance Law Effective Today