Wednesday, July 9, 2008
The General Assembly is now in session.
Tracking Virginia’s General Assembly
since 2007.
SB307: Identity theft; notice of database breach.
Chief Patron
Sen.
Roscoe Reynolds (D-20)
Roscoe Reynolds
(D-20)
Served: 1997–
Progress
 |
Introduced |
|
Passed Committee |
|
Passed House |
|
Passed Senate |
|
Signed by Governor |
|
Became Law |
Status
03/11/2008: signed by governor
Summary
Database breach notification. Requires that an individual or a commercial entity that conducts business in Virginia and that owns or licenses data that includes personal information about a resident of Virginia shall, when it becomes aware of a breach of the security of the system, (i) conduct in good faith a reasonable and prompt investigation to determine the likelihood that personal information has been or will be misused and (ii) notify the Office of the Attorney General that a breach has occurred. A breach of the security of the system is defined as the unauthorized acquisition and access of unencrypted or unredacted data that compromises the security, confidentiality, or integrity of personal information maintained by an individual or a commercial entity. Types of notification meeting the requirements of this bill are listed, but not required if, after a reasonable investigation, the person or commercial entity determines that there is no reasonable likelihood of harm to affected Virginia residents. The Attorney General may bring an action in law to address violations and ensure proper compliance with this section. Nothing in this section shall limit an individual from recovering direct economic damages resulting from a violation of this section.
View Full Text »Video
Votes were cast on this bill on the following dates for which Richmond Sunlight has video: 01/10/2008, 01/24/2008, 01/24/2008, 02/07/2008, 02/07/2008, 02/08/2008, 02/08/2008, 02/11/2008, 02/12/2008, 02/26/2008, 02/26/2008, 02/28/2008, 02/28/2008, 02/29/2008, 03/06/2008 and 03/11/2008.
Poll Results
1 vote
Tags
Bill Text
Subscribe
Keep track of the status of this bill as it moves through the General Assembly
— subscribe
via RSS.
Comments
Requires that an individual or a commercial entity that conducts business in Virginia and that owns or licenses data that includes personal information about a resident of Virginia shall, when it becomes aware of a breach of the security of the system, (i) conduct in good faith a reasonable and prompt investigation to determine the likelihood that personal information has been or will be misused and (ii) notify the Office of the Attorney General that a breach has occurred.