Legislatures have been passing a variety of new laws to protect personal information. California was the first state to pass a data security breach notification statute, and numerous states quickly followed suit. These statutes address companies that maintain databases with personal information. In the unfortunate event of a breach in these databases, the state law requires the company to notify affected individuals. The definition of personal information, type of notice, the trigger that requires notice, and the definition of a breach of the security system vary state by state. This 50-state survey deals solely with data security breach statutes covering private employers.
Read more detail on Recent Law Librarian posts –