Gov. Jay Inslee, D-Wash., signed a bill to amend the state’s data breach notification law, according to a post from Hunton Andrews Kurth's Privacy & Information Security Law Blog. The revamped data breach notification law expands the definition of personal information to include full date of birth; student, military or passport identification numbers; health insurance policy and identification numbers; and biometric information. Organizations are required to send the notification within 30 days and must provide information such as the amount of time the information was exposed. The amendments go into effect March 1, 2020.
Full Story