With Memorial Day unofficially kicking off summer, those keeping up on recent changes to state data breach laws are eyeing their calendars, as a series of state amendments are due to come into effect. Beginning on July 1, both Nevada and Wyoming will expand their definitions of personal information. One month later on August 1, North Dakota will follow suit, slightly limiting its definition of personal information but expanding its reporting duties. Key takeaways from the state amendments are detailed below.
The states’ legislative actions will likely up the ante at a time when Congress is considering a national data breach notification standard. The recent flurry of activity reflects the states’ growing interest in how data breaches affect their residents. Even in the face of national legislation, that interest is unlikely to subside.