Alabama is closing in on having its own state data breach notification bill, HealthITSecurity reports. The Alabama Data Breach Notification Act of 2018 had passed through the state Senate earlier this month and now moves to the House of Representatives. The bill will require any company suffering a data breach involving personally identifiable information to notify affected individuals within 45 days of determining an incident occurred. The rule defined PII as a person’s first name or initial and last name combined with several other identifiers, including a complete Social Security number, driver’s license number, and username or email with accompanying password.
Full Story