Which state jumped on the enanced data breach notification law bandwagon? Nebraska
What 3 changes did Nebraska make to its data breach laws?
- Expand the Data Triggering Notification to incude:
- user name or email address along with
- a password or security question and answer
- that would permit access to an online account
- Expands who Receives notice of a breach. Companies also have to notify the State Attorney General.
- Encryption standard changed so that if the hackers got a hold of the encryption key, the data is no longer considered encrypted.