New Breach Laws
Missouri adds a law with a “risk of harm trigger” aka the full-employment provision for lawyers and consultants. Texas adds health data to their notification list.
Most importantly, North Carolina requires notice to their attorney general for breaches smaller than 1,000 people. I think Proskauer here is being a little inaccurate when they characterize this as “being more forthcoming,” rather, it is “being forthcoming more often.”
Gisted from Brendon Tavelli, “Show-Me State Finally Shows Its Residents a Data Breach Notification Law, Other States (TX, NC, ME) Make Changes” at the Proskauer Rose privacy law blog.