State Of The (State) Data Breach Laws: 2017 Legislative Update, Part III

With 2017 nearing its end, the legislative activity in most state capitals has wound down and the majority of legislatures have ended their 2017 sessions. In Part I and Part II of our series, we looked at how a number of states amended or enacted data breach notification-related legislation (Arkansas, Delaware, Maryland, New Mexico, and Tennessee). Digital Insights brings you Part III in our series, State of the (State) Data Breach Laws, examining the major amendments passed in Utah, Virginia, and Washington, and how the bills in these states reshaped the data collection, data breach notification, and breach enforcement landscape. 

Utah: On March 23, 2017, Utah Governor Gary Herbert signed S.B. 99, expanding the ability of the attorney general to enforce the state's data breach notification statute. Though Utah's breach notification law previously empowered the attorney general to enforce and seek penalties for violations of the statute, effective May 9, 2017, the