Libbie Canter writes: Hawaii legislators have introduced several bills to amend the state’s data breach notice law. Two of these legislative measures would eliminate the “risk of harm” trigger for breach notification in Hawaii. Currently, notice to Hawaii consumers is required only “where illegal use of the [breached] personal information has occurred, or is reasonably…
Category: State/Local
States Jump Into the Security Breach Breach
Wayne Josel and Cindy Lo write: As discussed in our recent webinar “Whose Data Is It Anyway: Privacy in the De-Centralized Digital World”, currently there is no comprehensive federal statutory scheme to govern the protection of privacy. While lawmakers and agencies at the federal level continue to grapple with developing useful legislation to address privacy…
California Legislature to take up data breach notification proposal
A new year, a new governor, the same old problem and perhaps the same solution. State Sen. Joe Simitian, D-Palo Alto, has introduced a bill that he says will enhance consumer privacy protection by strengthening the notification requirements when databases of personal information are compromised. It’s the same bill that the Legislature passed last year…
Utah legislator proposes law to prevent child ID theft
There’s been some discussion in the past about what to do about child ID theft. ITRC had one idea, Adam Shostack had another, and a third commenter didn’t think ITRC’s suggestion was necessary or practical. A Utah legislator has a slightly different approach. Rep. Eric Hutchings, R-Kearns is proposing a state bill to prevent child…
HI: Gabbard wants a law addressing data leaks
Gene Park reports: Hawaii lawmakers are likely to take up proposed legislation that would punish state agencies responsible for data breaches that can result in identity theft. “Right now the problem is that victims are the ones who bear all the brunt in recovering from identity theft,” said state Sen. Mike Gabbard (D, Kalaeloa-Makakilo). “It’s…
Smaller companies challenged to comply with Massachusetts’ data privacy rules
Jill Gambon reports: Eight months after the state’s tough, new data privacy regulations went into effect, many businesses are still sorting through the rules and working to bring their firms into compliance. The regulations, which went into force in March, are intended to protect a consumer’s personal information from identity theft and other privacy breaches…