The clamor for a standardized data breach notification requirement has become almost as quotidian as a data breach itself. Incident-response planning in the U.S. is currently complicated by the existence of 47 different state breach notification laws and those of additional jurisdictions such as DC, New York City, Puerto Rico, Guam and the Virgin Islands. However, President Barack Obama’s recent proposal of a National Data Breach Notification Standard (or The Personal Data Notification & Protection Act) has received widespread attention for its promise to preempt and unify the existing patchwork of requirements. IAPP Westin Fellow Patricia Bailin, CIPP/US, CIPT, examines the impact the new bill would have on existing law and provides an interactive chart for comparison of existing and proposed law.
Full Story