An enhanced resource for analysis of data breach notification laws for all 50 states is now just a click away. BakerHostetler combined two of its state breach notification law resources (a summary of the laws and a guide to common questions) into a new interactive map. The resource also has new features, including the ability to access the full text of each state and territory law. Security incidents will continue to occur, and offering a tool like this is a way for us to help our clients triage and appropriately respond to incidents.
Prepared by the award-winning Privacy and Data Protection team at BakerHostetler, the map provides the following information regarding each state:
- Personal information definition
- Persons covered
- Encryption/notification trigger
- Specific content requirements
- Timing
- Penalty/private right of action
- Other provisions
"In addition to offering a concise, easy-to-digest overview of each state law, the map identifies key issues and legal trends in the laws," said Ted Kobus, the firmwide leader of the privacy and data protection team. "Individuals may also use the map to compare states' laws to understand their commonalities and differences."
BakerHostetler's Privacy and Data Protection team offers practical and service-oriented counseling to clients from all tiers of the Fortune 500, as well as health systems, universities, small and midsize businesses, emerging technology companies, and state and municipal entities. Team members are located in key cities across the United States and have global reach by maintaining strategic partnerships with lawyers, security firms and risk management companies around the world.
In March 2018, the team published its fourth annual Data Security Incident Response Report, which provides an analysis of the more than 560 cyber incidents handled by the team in 2017. Reflecting on the increasingly sophisticated nature of attacks, the aggressiveness by regulators in researching breaches and the expectations of highly developed responses, the report offers intelligence to help entities reduce their risk profile, build resilience, and be better prepared to respond when incidents occur.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.