HB 390 Compromised Data Notification Act; created

About HB-390

Compromised Data Notification Act. Creates the Compromised Data Notification Act, which, following discovery or notification of a breach of a security system, requires a state agency that owns or licenses computerized data that includes personal information to provide notice of the breach to all residents of Virginia whose unencrypted personal information was or is reasonably believed to have been acquired by an unauthorized person. The notice shall be given in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement or any measures necessary to determine the scope of the breach and restore the reasonable integrity of the system. This bill has been incorporated into