Lawmakers in Colorado are considering revamping the state’s privacy and data security laws, Healthcare IT News reports. The proposed bill making its way through Colorado would require organizations to report a data breach within 30 days. The current law states companies must report a breach without “reasonable delay,” while HIPAA regulations dictate a health care organization must report a breach within 60 days. The changes to the law would also include an expanded definition of personal information to include passwords and passcodes. The bill passed through Colorado’s House Committee on State, Veterans, and Military Affairs and has been referred to the Committee on Appropriations for consideration.
Full Story