New Year, New Breach Notification Laws

As reported in a recent Privacy and Security Matters post, we have updated the “Mintz Matrix,” a summary of the U.S. state data breach notification laws. The Mintz Matrix is an invaluable tool for reviewing state breach notification requirements, which may apply in addition to HIPAA in the event of a data breach. We update the Mintz Matrix on a quarterly basis, or more frequently if necessary.

The updated Mintz Matrix is available here. This update includes new information regarding California’s amendments to its breach notification requirements and the expansion of Kentucky’s recent data breach law.

We hope this chart is helpful to you, but we must note that it is for informational purposes only and does not constitute legal advice or opinions regarding any specific facts relating to specific data breach incidents. You should seek the advice of experienced legal counsel (e.g., the Mintz Levin privacy team) when reviewing options and obligations in responding to a particular data security breach.