Shostack + Friends Blog Archive


New Breach Laws

Missouri adds a law with a “risk of harm trigger” aka the full-employment provision for lawyers and consultants. Texas adds health data to their notification list.

Most importantly, North Carolina requires notice to their attorney general for breaches smaller than 1,000 people. I think Proskauer here is being a little inaccurate when they characterize this as “being more forthcoming,” rather, it is “being forthcoming more often.”

Gisted from Brendon Tavelli, “Show-Me State Finally Shows Its Residents a Data Breach Notification Law, Other States (TX, NC, ME) Make Changes” [link to no longer works] at the Proskauer Rose privacy law blog.