Page 4 - Cyber Bytes News Today

Determines the purposes and means of processing consumers personal information. The bill defines a "consumer" as an individual who is an Alabama resident, however identified, including by any unique identifier. The ACPA does not provide any minimum thresholds based on the amount of personal information collected, revenue attributable to the sale of personal information, or annual gross revenue. What type of information would it cover? The bill defines personal information to include identifiers...

To embed, copy and paste the code into your website or blog: Maine has become the latest state to adopt a version of the National Association of Insurance Commissioners (NAIC) model cybersecurity law. Signed into law on March 17, 2021, the Maine Insurance Data Security Act establishes investigation procedures, data security program standards, and notification requirements for persons authorized or registered to operate pursuant to the insurance laws of Maine (licensees), with the aim of protec...

A new data protection and privacy bill has been introduced in Illinois. This comprehensive bill, titled Consumer Privacy Act (ICPA), would provide more explicit notice and extended...

To embed, copy and paste the code into your website or blog: On February 16, the New York State Department of Financial Services (DFS) issued a cyber fraud alert, warning of a growing cybercriminal campaign to steal consumer, Nonpublic Information (NPI). The hacked data is being taken from public-facing websites and used to obtain pandemic and unemployment benefits. The first reports of fraud were received in late December 2020, and early January 2021, from automobile insurers, who reported tha...

To embed, copy and paste the code into your website or blog: A comprehensive data protection and privacy bill has been introduced in Florida. Like the California Consumer Privacy Act (CCPA) and other recently proposed state laws, it would provide Florida consumers more control over their personal information, impose a series of requirements on covered business, and create a limited private right of action. If enacted, it would go into effect on January 1, 2022. To whom would it apply? The Flori...

To embed, copy and paste the code into your website or blog: The recently introduced Oklahoma Computer Data Privacy Act (OCDPA) is one of the nations first "opt-in" proposed data privacy laws. The law would require businesses to obtain consent before collecting and selling consumer personal information and create a private right of action with potentially steep statutory damages. To whom would it apply? The OCDPA would apply to businesses that: Do business in Oklahoma; Collect consumers persona...

"HIPAA Compliance" seals are not a reliable indicator that a company's website employs reasonable measure to secure personal medical information. That is one lesson from a recently...

One of the most notable features of the new California Consumer Privacy Rights Act (CPRA) and the proposed Virginia Consumer Data Protection Action (VCDPA)—which has now passed both...

* Update, February 5, 2021: Senate Bill 1392 has been passed in the Virginia Senate. As noted, an identical companion bill previously was passed by the House of Delegates. If Governor...

A proposed bill in the North Dakota House of Representatives would prohibit the sale by a covered entity of a user's protected data without consent. The bill, which was sponsored by...