New Breach Laws
Missouri adds a law with a “risk of harm trigger” aka the full-employment provision for lawyers and consultants. Texas adds health data to their notification list.
Most importantly, North Carolina requires notice to their attorney general for breaches smaller than 1,000 people. I think Proskauer here is being a little inaccurate when they characterize this as “being more forthcoming,” rather, it is “being forthcoming more often.”
Gisted from Brendon Tavelli, “Show-Me State Finally Shows Its Residents a Data Breach Notification Law, Other States (TX, NC, ME) Make Changes” [link to http://privacylaw.proskauer.com/2009/07/articles/security-breach-notification-l/showme-state-finally-shows-its-residents-a-data-breach-notification-law-other-states-tx-nc-me-make-changes/print.html no longer works] at the Proskauer Rose privacy law blog.