Seven state attorneys general announced shares of an $8 million settlement with convenience store chain Wawa related to a 2019 data breach. Individuals in Delaware, Florida, Maryland, New Jersey, Pennsylvania, Virginia, and Washington, D.C., were affected by the breach involving personal information from approximately 34 million payment cards. In addition to the fine, Wawa will adopt and maintain a series of data security practices while providing "security awareness and privacy training to all personnel" that implement and oversee information security.
27 July 2022
State attorneys general secure $8M data breach settlement
RELATED STORIES
Controllers, processors and subprocessors in chains
Notes from the IAPP Canada: Recommendations, calls to reform Privacy Act 'a good start'
A view from DC: Marriott and the minimum extent necessary
Retrospective: 2024 in state sectoral privacy law and AI law
Notes from the Asia-Pacific region: India's PM talks global governance for digital technology