New Colorado Breach Notification Rules Signed Into Law
Colorado has enacted a new data breach notification law that contains some of the most stringent requirements in the US.
If your company has customers in Colorado, get ready to revamp your policies notifying victims of a data breach. Last week, Gov. John Hickenlooper signed into law requirements for notification that are the most stringent in the nation.
Under the new law, if an individual's personal information is part of a breach, he must be notified within 30 days after discovery — no exceptions. In addition, the law, passed with bipartisan support, broadens the definition of personally identifying information to including health care and financial data.
The new notification requirement will have a special impact on organizations that must notify individuals of a HIPAA breach because it takes precedence over the federal 60-day notification window.
Notification requirements include telling affected individuals which data was released and the estimated data of the breach.
For more, read here.
Top industry experts will offer a range of information and insight on who the bad guys are – and why they might be targeting your enterprise.
About the Author(s)
You May Also Like
Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024Safeguarding Political Campaigns: Defending Against Mass Phishing Attacks
May 16, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024