New state laws that took effect January 1, 2019 likely will have
a broader impact on how U.S. companies collect, process, and secure
consumers' personal information, in addition to how and when
they report data breaches. With the EU's General Data
Protection Regulation (GDPR) now in force and no omnibus U.S.
federal law yet in place to protect all individuals' personal
information, state legislators have begun to pave the way for new
data regulations and stronger consumer protections that carry
serious implications for U.S. firms operating across various
industries. Vermont and South Carolina are the latest states to
enact their own unique data protection legislation regulating data
brokers and licensed insurers, respectively, which other states may
likely imitate in the very near future. For these reasons, now is
the time for your organization to start addressing and adopting
policies, procedures, and processes that ensure the privacy and
security of the consumer data
