Maya Atrakchi and Joseph Lazzarotti of Jackson Lewis write: There are only two states in the U.S. that have yet to enact data breach notification laws, but that may change in 2018. Several weeks ago, the South Dakota state legislature announced that a data breach notification bill (Senate Bill No. 62) was pending. Now, Alabama…
Category: State/Local
N.C. Attorney General, State Representative Drafting Bipartisan Bill To Combat Security Breaches
Kathleen Bradshaw Burchette of Nexsen Pruet writes: While some may be wringing their hands over members of the legislature who just can’t seem to get along, North Carolinians have reason to hope that bipartisanship is not a thing of the past. On Jan. 8, 2018, Democratic Atty. Gen. Josh Stein and Republican State Rep. Jason Saine said…
Oregon, New York, Alabama, and Rhode Island Join List of States Considering Data Breach Legislation Post-Equifax
David M. Stauss and Gregory Szewczyk of Ballard Spahr LLP write: In the absence of federal action, state legislators continue to propose bills that would increase data privacy and security protections for consumers. Any entity that does business in these states or maintains confidential information of their residents should monitor the legislation to determine whether and how…
“Misguided” hacking bill threatens to ice security researchers, say critics
Lisa Vaas reports: The US state of Georgia is considering anti-hacking legislation that critics fear could criminalize security researchers. The bill, SB 315, was drawn up by state senator Bruce Thompson in January, has been approved by the state’s senate, and is now being considered by its house of representatives. The bill would expand the…
Sweeping Georgia cybercrime bill would target ‘snoopers’
AP reports: Lying about your weight on an online dating site? Checking out who won the Falcons game from your work computer? Using your computer hacking knowledge as an “ethical hacker?” Those actions may become illegal if a Georgia bill gets voted into law, civil liberty advocates say. Supporters of a bill making its way…
Data breach notification bill passes in Nebraska Legislature
Martha Stoddard reports that the Nebraska legislature passed LB 757 on a 46-0 vote. The measure requires any individual or commercial entity holding personal information to implement and maintain security procedures. The same requirement would apply if the information is given to a third party. If a breach does occur, LB 757 would prohibit credit…