States passed data breach response laws, requiring reporting and imposing liability on companies under certain circumstances in event of a breach of data security.Business should not presume complying with federal law ensures adherence to a potentially higher state standard,
In this second installment, we focus on the role of state attorneys general in enforcing U.S. consumer data privacy laws. For our most recent previous article, click here. Most federal.
Avalon Healthcare settled with state regulators after its 2019 email hack due to failing to timely report, while Scripps Health will pay $3.5 million after its 2021 data theft tied to ransomware.