Gov. Phil Murphy, D-N.J. signed a bill to amend the state's data breach notification law, according to Hunton Andrews Kurth's Privacy & Information Security Law Blog. The bill has been updated to include online account information under the definition of personal information. Businesses are required to notify individuals of a breach that involves a citizen's “user name, email address, or any other account holder identifying information, in combination with any password or security question and answer that would permit access to an online account.” The amendment goes into effect Sept. 1.
Full Story