Privacy Monday - September 30, 2013 - Here's the New Mintz Matrix

By Cynthia J. Larose

As we all ponder the potential for the first U.S. government shut down in 18 years, here are some Monday privacy tidbits to change the subject a bit.

September Mintz Matrix

As our readers know, we maintain a summary of the US state data breach notification laws, which we refer to as the "Mintz Matrix."   We update the Mintz Matrix on a quarterly basis, or more frequently if developments dictate.

We’ve updated the Mintz State Data Breach Notification Matrix to reflect changes to California’s law.   The Mintz Matrix is available here.

California SB 46 and AB 1149 have brought about the following changes:

(1)   The definition of PI has been expanded to include username or email in combination with password or security question and answer that would permit access to an online account.

(2)   The law specifies when electronic notice can be provided.

Now, for today’s disclaimer: This chart is for informational purposes only and does not constitute legal advice or opinions regarding any specific facts relating to specific data breach incidents. You should seek the advice of experienced legal counsel (e.g., the Mintz Levin privacy team) when reviewing options and obligations in responding to a particular data security breach.

Press Roundup

Last week was a busy one for members of the Mintz Levin privacy team - here's a peek at our clipping file:

Law360 (registration may be required) - Va. Tech Breach Reveals Info on 145K Job Applicants - quotes Cynthia Larose

FierceCIO - How a decent risk assessment could save you a lot of money - Interview with Cynthia Larose

E-Commerce Times - Judge Cuts Google No Slack in Gmail Wiretap Case - quotes Cynthia Larose

Subscribe To Viewpoints

Published

    • Viewpoint Topics

  • Privacy & Cybersecurity

    • Professionals

  • Cynthia J. Larose

    • Author

    Cynthia J. Larose

    Member / Co-Chair, Privacy & Cybersecurity Practice

    Cynthia J. Larose is Chair of the firm's Privacy & Cybersecurity Practice, a Certified Information Privacy Professional-US (CIPP-US), and a Certified Information Privacy Professional-Europe (CIPP-E). She works with clients in various industries to develop comprehensive information security programs on the front end, and provides timely counsel when it becomes necessary to respond to a data breach.