Mintz's Privacy Team maintains a summary of the US state data breach notification laws, which it refers to as the “Mintz Matrix," and updates on a quarterly basis or more frequently if developments dictate. This week, the Privacy Team updated the Matrix once again, this time to reflect recent changes to Kentucky and Iowa’s laws. The Mintz Matrix is available here. One of our sister blogs, Privacy & Security Matters, also discusses the changes to those laws in more detail here.
Note: The chart is for informational purposes only and does not constitute legal advice or opinions regarding any specific facts relating to specific data breach incidents. You should seek the advice of experienced legal counsel (e.g., the Mintz Levin privacy team) when reviewing options and obligations in responding to a particular data security breach.