Collaborate Disseminate
John G. Kerkorian, David M. Stauss, Gregory P. Szewczyk, and Kimberly A. Warshawsky of Ballard Spahr write: The Arizona State Legislature is considering proposed legislation that, if enacted, would significantly change the requirements for how Arizona … Continue reading Arizona Legislature Considers Strengthening Data Breach Notification Law
Bradley Barth reports: More than 5.3 million residents of North Carolina were victims of data breaches in 2017 – an escalating trend that has prompted state Attorney General Josh Stein (D) and state Rep. Jason Saine (R) to introduce newly proposed legi… Continue reading North Carolina introduces data breach legislation
Elizabeth Hewitt reports: Vermont lawmakers are poised to take action to regulate data brokers in the coming months. Data brokers — companies that collect and maintain consumers’ personal information — have been in the spotlight after the credit … Continue reading Vermont poised to act on data security
James Benjamin, Jr. of Pessin Katz Law, P.A. writes: On January 1, 2018, several amendments to the Maryland Personal Information Protection Act, (“MPIPA”) MD Code Ann., Com. Law §14-3501 et seq. will go into effect. Businesses collecting personal info… Continue reading Businesses Take Note: Updates to Maryland’s Data Breach Notification Law Take Effect January 1, 2018
William Berglund, Robert J. Hanna and Victoria L. Vance of Tucker Ellis write: Maintaining robust cybersecurity measures that meet government- and industry-recognized standards will provide businesses operating in Ohio with a legal defense to data brea… Continue reading Ohio Bill Proposes Safe Harbor Against Breach Suits to Businesses Maintaining Recognized Cybersecurity Programs
Not surprisingly, states are responding to the Equifax breach, but they are taking different approaches. Here are how two states are responding: Law.com reports that in New York: Attorney General Eric Schneiderman is proposing comprehensive legislation… Continue reading In the wake of Equifax, states respond with new legislation
Leslie A. Pappas reports: The Delaware House has moved legislation that would strengthen the state’s data breach notification law. The bill would require any person doing business in Delaware to safeguard personal information. It would expand the definition of personal information to include medical information, biometric data, user names and passwords, passport numbers, routing numbers […] Continue reading Delaware House Moves Bill to Expand Data Breach Notice Law
Michael B. Katz and Cynthia J. Larose of Mintz Levin write: After a quiet winter there has been significant activity in state legislatures to enact, strengthen or clarify their data breach notification statutes. The latest happenings are summarized below and we have updated our “Mintz Matrix” to reflect these new and pending laws. Read more […] Continue reading States Take Action! New Mexico, Tennessee and Virginia Pass New Data Breach Legislation
Liisa M. Thomas, Robert H. Newman, and Eric J. Shinabarger of Winston Strawn LLP write: With little fanfare, Virginia recently amended its data breach notification law, requiring employers and payroll service providers to notify the Virginia Attorney G… Continue reading Virginia Adds Notification Requirements for Payroll Incidents to Breach Law
Erich Falke writes: Then there were two. On March 16, 2017, the New Mexico state legislature passed a bill requiring that New Mexico residents be notified if their “personal identifying information” was affected by a breach of electronic data. Upon signature of the bill, New Mexico will join 47 other states requiring such notification, and the only […] Continue reading New Mexico passes data breach notification and protection bill