On January 1, amendments to the California and Oregon data breach notification laws took effect. For the third time in the past three years, California passed legislation updating California's data breach notification statute. The California amendments require a new breach notice format, define "encryption," expand the definition of "personal information," and clarify the substitute notice requirements. Among other updates, the Oregon amendments expand the definition of "personal information" and provide new threshold requirements and new exemptions for data breach notifications.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
