Privacy & Information Security Law Blog: Washington Amends Data Breach Notification Law

As reported by Bloomberg Law, on May 7, 2019, Washington State Governor Jay Inslee signed a bill (HB 1071) amending Washington's data breach notification law. The new requirements include the following:

• Expanded Definition of Personal Information. HB 1071 expands the definition of "personal information." Washington's breach notification law previously defined personal information as an individual's name in combination with the individual's Social Security number, state identification card number, or financial account or credit or debit card number in combination with any required security code, access code or password that would permit access to an individual's financial account. HB 1071 adds the following data elements to the definition, when compromised in combination with an individual's name: