New, Improved Indiana Breach Law
Thanks to infosec expert (and Indiana resident) Chris Soghoian, and a receptive state legislator who listened to an informed constituent, Indiana now has a much improved breach notification law , closing a loophole we discussed previously.
We’ve written about expert involvement in crafting improved state laws before, most recently here.
BTW, the loophole Indiana has fixed still has a tenacious grasp on the press. As folks on the Dataloss Mailing List know all too well, nary a week goes by without a reportedreporter dutifully and unquestioningly stating that “risk is said to be small, since the stolen laptop was protected by a password”. More on this in a future post.