Wednesday, July 10, 2024

FYI: Pennsylvania Amends Data Breach Notification Law

Pennsylvania Gov. Josh Shapiro recently approved Senate Bill 824, which amends Pennsylvania's data breach notification law, 73 Pa. Stat. Ann. § 2301, et seq.

 

The amendments will go into effect Sept. 26, 2024.

 

Among other things, the amendments:

 

  • Require concurrent notification to the Attorney General if notification must be given to more than 500 individuals
  • Require the notice to the Attorney General include:

The organization name and location

The date of the breach

A summary of the incident

An estimated number of individuals affected

An estimated number of individuals in Pennsylvania affected

  • Reduce the threshold for reporting an incident to consumer reporting agencies from more than 1,000 affected individuals to more than 500
  • Require entities that are required to report the incident to consumer reporting agencies to assume the costs of providing the affected individuals with:

Access to one credit report if an individual is not eligible for a free report

Access to credit monitoring services for one year

 

 

 

Ralph T. Wutscher
Maurice Wutscher LLP
20 N. Clark Street, Suite 3300
Chicago, Illinois 60602
Direct:  (312) 551-9320

Mobile:  (312) 493-0874
Email: rwutscher@MauriceWutscher.com

 

Admitted to practice law in Illinois

 

 

 

Alabama   |   Florida   |   Illinois   |   Massachusetts   |   New Jersey   |   New York   |   Ohio   |   Pennsylvania   |   Tennessee   |   Texas   |   Washington, DC

 

 

NOTICE: We do not send unsolicited emails. If you received this email in error, or if you wish to be removed from our update distribution list, please simply reply to this email and state your intention. Thank you.


Our updates and webinar presentations are available on the internet, in searchable format, at:

 

Financial Services Law Updates

 

and

 

The Consumer Financial Services Blog

 

and

 

Webinars