{"id":165,"date":"2015-04-29T20:14:00","date_gmt":"2015-04-29T20:14:00","guid":{"rendered":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/2015\/04\/29\/2-states-first-to-update-data-security-laws-for-2015\/"},"modified":"2015-04-29T20:14:00","modified_gmt":"2015-04-29T20:14:00","slug":"2-states-first-to-update-data-security-laws-for-2015","status":"publish","type":"post","link":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/2-states-first-to-update-data-security-laws-for-2015\/","title":{"rendered":"2 States First to Update Data Security Laws for 2015"},"content":{"rendered":"<p>Montana and Wyoming, wrangling western individualism, passed new data breach notification laws. Here&#8217;s what they did:<\/p>\n<p>Wyoming expanded what information triggers a data breach notification to include:<\/p>\n<ul>\n<li>Username or email address with password or security question and answer<\/li>\n<li>Birth or marriage certificate<\/li>\n<li>Medical, biometric or health insurance information<\/li>\n<li>Individual taxpayer identification number.<\/li>\n<\/ul>\n<p>Wyoming also expanded what should be included in a notification received by a consumer to include:<\/p>\n<ul>\n<li>A\u00a0toll-free number to contact the organization<\/li>\n<li>Types\u00a0of PII affected<\/li>\n<li>A\u00a0general description of the breach<\/li>\n<li>Approximate date of the breach<\/li>\n<li>General actions taken to protect against further breaches<\/li>\n<li>Advice relating to reviewing account statements and monitoring credit reports-<\/li>\n<li>Whether the notification was delayed due to law enforcement.<\/li>\n<\/ul>\n<p>Montana also expanded what type of information triggers a notification, to include:<\/p>\n<ul>\n<li>Information that relates to an individual&#8217;s physical or mental condition<\/li>\n<li>Medical history, medical claims history, or medical treatment information obtained from a medical professional or medical care institution, from the individual, or from the individual&#8217;s spouse, parent, or legal guardian.<\/li>\n<li>a tax ID number<\/li>\n<\/ul>\n<p>Montana also broadened which entities receive notification to include:<\/p>\n<ul>\n<li>A company must \u201csimultaneously\u201d provide a copy of the notice to the Montana Attorney General\u2019s Consumer Protection Office.\u00a0<\/li>\n<li>If the data breach involves insurance information,\u00a0\u00a0simultaneous notice must be given to the Montana Insurance Commissioner.<\/li>\n<\/ul>\n<p><a href=\"http:\/\/www.jdsupra.com\/legalnews\/montana-and-wyoming-expand-data-breach-n-90938\/\">Wilson Elser\u00a0via JD Supra<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Montana and Wyoming, wrangling western individualism, passed new data breach notification laws. Here&#8217;s what they did:<\/p>\n<p>Wyoming expanded what information triggers a data breach notification to include:<\/p>\n<ul>\n<li>Username or email address with password or security question and answer<\/li>\n<li>Birth or marriage certificate<\/li>\n<li>Medical, biometric or health insurance information<\/li>\n<li>Individual taxpayer identification number.<\/li>\n<\/ul>\n<p>Wyoming also expanded what should &#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,3],"tags":[],"class_list":["post-165","post","type-post","status-publish","format-standard","hentry","category-data-privacy","category-legislative-trend","entry"],"_links":{"self":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/comments?post=165"}],"version-history":[{"count":0,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/165\/revisions"}],"wp:attachment":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/media?parent=165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/categories?post=165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/tags?post=165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}