Burr & Forman

05.17.2018   |   Articles / Publications

Burr Alert: Insights into SB318: Alabama’s Proposed Data Breach Notification Requirements

Alabama’s Governor, Kay Ivey, signed the Alabama Data Breach Notification Act (SB318) into law on March 28, 2018. The Act, which you can read here, goes into effect on June 1, 2018. Alabama was the last State to pass a data breach notification and reporting law, as South Dakota’s governor signed S.B. 62 on March 21, 2018.

SB318 is one of the most comprehensive data breach laws in the country due to four main requirements. Covered entities must: (1) implement reasonable security efforts to protect sensitive data; (2) conduct a good faith investigation after a data breach; (3) provide written notification to victims post-breach; and (4) dispose of records containing sensitive personally identifying information (“SPII”) pursuant to law, regulation or business need.

Download the full article, “Insights into SB318: Alabama’s Proposed Data Breach Notification Requirements” written by Fob James.