Ride the Lightning

Alabama Becomes the Last State to Enact a Data Breach Notification Law

April 4, 2018

As reported by The National Law Review, on March 28th Alabama's governor signed into law a data breach notification law, becoming the last state in the country to do so, soon after South Dakota. Fifteen years ago, California was the first state to enact a data breach notification law.

The Alabama law applies to electronically stored "sensitive personally identifying information." Such information involves a name plus at least one of the following: SSN, government issued identification number, financial account number, medical information, health insurance policy or identification, or e-mail address and password that would permit access to an account containing any sensitive personally identifying information. Generally, notification to residents affected by a breach must be made within 45 days, with some exceptions. The law takes effect on May 1st.

Amazing to me that it took 15 years for all the states to enact these laws!

E-mail: Phone: 703-359-0700
Digital Forensics/Information Security/Information Technology
https://www.senseient.com
https://twitter.com/sharonnelsonesq
https://www.linkedin.com/in/sharondnelson
https://amazon.com/author/sharonnelson