Lege Trend: Expand Definition of Personal Information to Trigger Notification

Nevada is the most recent state to expand the definition of personal information that trigger data security laws. 

The expanded definition includes:

  • individual’s medical identification number or health insurance identification number and
  • a user name, unique identifier or email address with its associated password, access code or security question and answer that would permit access to an online account

This reflects a growing trend to include ema…

States have hard time hiring data security experts.

The National Association of State Chief Information Officers, an organization for states’ chief information technology officials, found states are plagued by problems with hiring cybersecurity experts.

Why? 

  • “Nearly 92 percent of states said salary and pay grades presented a challenge in attracting and keeping employees.
  • 86 percent of states said they’re having trouble recruiting people to fill vacant slots. Four years ago, only 55 percent of states reported …

The difference between data security & data privacy?

Data security:

  • “knowing where your data is located”
  •  ” who may access the data. “

Data privacy:

  • “predicated on data security”
  • “requires further understanding how personal data is being collected, processed (and by whom), and transferred,”
  • “and the consistency of these practices with applicable laws, regulations, and the reasonable expectations of the relevant consumers”

adminPosted indata privacy, legislative trend