This advisory summarizes selected state legislative and regulatory developments regarding corporate data privacy and security obligations. A series of new laws and regulations enacted in recent months require, among other things: (a) encryption of personal information on laptops, PDAs and portable media, including flash drives; (b) encryption of personal information transmitted over the Internet; (c) development and publication of Social Security Number (SSN) privacy protection policies; and (d) specific measures to protect the confidentiality and security of employee SSNs. These laws and regulations carry significant statutory penalties for violations and, in some states, the possibility of businesses facing private rights of action for noncompliance. This advisory provides a brief update on these developments in the states of Massachusetts, New York, Nevada, Connecticut and Texas.
The advisory is provided in PDF on the Alston & Bird web site: http://www.alston.com/privacy_advisory_aggressive_laws