Data Protection and Breach Notification Compliance Laws
Various national, state and local governments are discussing or have instituted data protection and breach notification legislation to protect citizen information. The laws vary in the particulars such as how data must be governed, whether national law applies across borders, the rights that citizens have around their information, and the enforcement powers of the legal authorities, but the rules typically include an exemption from fines or reporting data breaches if the data in question has been secured with encryption.
National Data Breach Protection and Disclosure
National governments around the world are paying attention to protecting citizen information in the wake of concern about the use and potential exposure of personally identifiable information. From the United Kingdom (UK) Data Protection Act to South Korea's Personal Information Protection Act (PIPA), laws are being legislated and enacted that mandate the protection of personally identifiable information (PII).
State Data Breach Protection and Disclosure
In the United States, California's SB 1386 law requires a state agency, or a person or business that conducts business in California, that owns or licenses computerized data that includes personal information, as defined, to disclose in specified ways, any breach of the security of the data, as defined, to any resident of California whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person.
Based on California's law, 46 U.S. states, the District of Columbia and Puerto Rico have enacted breach law. In addition, some U.S states including Massachusetts, California, Ohio, Nevada, Arizona have enacted state data protection laws. In 2009, the U.S. HITECH Act created the first nationwide data breach disclosure law for entities covered by the U.S. HIPAA law along with their business partners.
Vormetric Data Breach Protection Solution
By providing strong encryption that not only protects the data, but the encryption keys as well, Vormetric Data Security provides the necessary safeguards to keep your company from having to face breach notifications and also protect your most valuable business assets - your customers, your brand and your bottom line.
