SECURITY TREND. 2 Legislatures Changed When Data Breach Notifications are Required.

What change did the Nevada & Rhode Island Legislatures make? Changed the definition of personal information for data breaches

What was added to the definition of personal information?

• medical identification number
• a health insurance identification number
• a user name, unique identifier or electronic mail address in combination with a password, access code or security question and answer that permits access to an online account

The difference between the 2 states? Rhode Island clarified which accounts were protected by clarifying that it applies to “personal, medical, insurance or financial account.”

National Law Review | Summer Round-Up: Four States Bolster Data Breach Notification Laws and More Changes on the Way