On September 1, 2018, Colorado’s breach notification statute update became effective. The legislation bolsters data privacy protections by requiring notice to Colorado residents affected by a data breach and the Colorado AG within 30 days of determining that a security breach occurred. It also sets forth the content of notice to residents, expands the definition of personal … [Read more...]
California Enacts GDPR-Like Privacy Changes
On the heels of Colorado’s new cybersecurity legislation, California has now announced that it has enacted the California Consumer Privacy Act of 2018. The legislation provides residents of California the right to: be informed about the personal information that is collected about them; be informed whether their information is sold to third-parties and who those … [Read more...]
FTC Defense Lawyer on Colorado’s Cybersecurity Legislation
Colorado’s governor recently signed into law House Bill 18-1128. It is effective September 1, 2018 and sets forth information security requirements for businesses and third-party service providers, amends the state’s data breach notification statute and expands the definition of “personal information.” “Covered entities” are subject to the law. Generally speaking, a “covered … [Read more...]