Carol A. Clark writes: This afternoon, the Senate Public Affairs Committee unanimously passed House Bill 15, known as the Data Breach Notification Act. The legislation is sponsored by Republican Rep. Bill Rehm of Bernalillo. House Bill 15 would require businesses and other entities to implement reasonable procedures to protect the personal information of consumers. The…
Category: State/Local
Missouri proposal requires schools to tell you when child’s information stolen
Stephanie Garland reports: Right now the state auditor said hackers can steal your sensitive information and school districts do not have to tell you. That could change this August before some schools start. […] If passed, a new bill would change that and require school districts to report data breaches to parents and the government….
State Data Breach Notification Laws: February 2017 Privacy Update
Cynthia J. Larose and Michael B. Katz of Mintz Levin write: During 2016, amendments to breach notification laws in five states went into effect (California, Nebraska, Oregon, Rhode Island and Tennessee). And by the end of last year, well over twenty states had introduced or were considering new regulations or amendments to their existing security breach…
Three States Join Others to Expand Personal Information Definition to Include Usernames or Email Addresses
Mark L. Krotoski and W. Scott Tester of Morgan Lewis remind entities that duty to notify of a breach depends on state definitions of “personal information,” and more states are now including usernames or email addresses as personal information: Illinois, Nebraska, and Nevada are the latest to add usernames or email addresses to the definition…
Hooray for transparency: Massachusetts puts data breach archive online
The state’s announcement: The Office of Consumer Affairs and Business Regulation today announced the online public availability of its Data Breach Notification Archive. The Massachusetts Data Security Law (M.G.L. c.93H) requires any entity that keeps a Massachusetts resident’s personal information to notify affected residents, the Office of Consumer Affairs and Business Regulation, and the Attorney…
NY financial regulator to delay cyber security rules
Suzanne Barlynne reports: New York’s financial regulator will delay an anticipated Jan. 1 deadline for banks and insurers doing business in the state to comply with controversial cyber security rules, a person familiar with the matter said. The regulator, the New York State Department of Financial Services, will publish a revamped version of its cyber…