| Security Breach Notification Laws |
Article Index for Security |
Website Links For Security |
Information AboutSecurity Breach Notification Laws |
|
The first such law, the California data security breach notification law, Cal. Civ. Code 1798.82 and 1798.29, was enacted in 2002 and became effective on July 1, 2003.http://info.sen.ca.gov/pub/01-02/bill/sen/sb_1351-1400/sb_1386_bill_20020926_chaptered.html As related in the bill statement, law requires "a state agency, or a person or business that conducts business in California, that owns or licenses computerized data that includes personal information, as defined, to disclose in specified ways, any breach of the security of the data, as defined, to any resident of California whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person." In addition the law permits delayed notification "if a law enforcement agency determines that it would impede a criminal investigation." The law also requires any entity that licenses such information to notify the owner or licensee of the information of any breach in the security of the data. The California law has been the model for the enactment of similar laws in other states.http://infosec.uga.edu/policymanagement/breachnotificationlaws.php The National Conference Of State Legislatures maintains a list of enacted and proposed security breach notification laws.http://www.ncsl.org/programs/lis/cip/priv/breach.htm A number of bills that would establish a national standard for data security breach notification have been introduced in the U.S. Congress , but none passed in the 109th Congress.http://www.rsa.com/blog/entry.asp?id=1173 References |
|
|