Connecticut and Virginia's consumer privacy laws have left certain data exempt from cybersecurity requirements under the statutes, University of California Berkeley Center for Law & Technology Executive Director James Dempsey writes for Privacy Perspectives. He advocated states considering modeling Connecticut and Virginia's legislation should be mindful of the exemptions in their bills, which may advance consumer rights at the cost of better cybersecurity. Connecticut and Virginia's laws have exempted government agencies, nonprofits and colleges, whereas at least 21 other states have laws that require cybersecurity measures for personal information with narrow exemptions.
Full Story