Tennessee has enacted the National Association of Insurance Commissioner’s (“NAIC”) Insurance Data Security Law. The new Tennessee law is based on the model law that was finalized in October 2017, and requires Tennessee-licensed insurers to develop and implement written information…
State Laws
The Colorado Privacy Act (SB 190, “CPA”) is the third major state privacy law passed in the United States. The CPA provides Colorado residents with numerous rights while simultaneously placing numerous obligations on businesses. Even if your business is located…
On May 6, 2021, Tennessee Governor Bill Lee has signed the Insurance Data Security Law after its passage in the General Assembly. This new data security law creates obligations for insurance carriers in Tennessee, and was based on model legislation…
On June 8, 2021, the Colorado legislature passed the Colorado Privacy Act (SB 190, “CPA”). The CPA is the latest major state privacy law passed in the United States, following close on the heals of the headline grabbing California Consumer…
In March 2021, the “Tennessee Information Protection Act” was proposed in the Tennessee State House of Representatives as an amendment to an existing bill dealing with campaign finance disclosures. The 27 page proposed amendment incorporated many similar provisions as those…
In February 2021, state legislators introduced an amendment to Tennessee’s data breach law to extend the notice from 45 to 60 days. Tennessee’s data breach law is contained within the Tennessee’ Identity Theft Deterrence Act (T.C.A. § 47-18-2107). You can…
The city of Knoxville, Tennessee recently fell victim to a ransomware attack which took many of the city’s government websites and computer servers offline, rendering many public services inaccessible for nearly a week. Forensic analysis revealed that the city was…
On June 1, 2020, following months of negotiations, modifications, rule making events, public hearings, and public comments, the California Office of the Attorney General has submitted the text of the CCPA final regulations to the California Office of Administrative Law…
The Consumer Rights Under the CCPA The CCPA guarantees a number of consumer rights, and businesses need to take steps to ensure compliance. Most of the rights are explicitly enumerated within the text of the CCPA. However, some are implicitly…
Tennessee’s data breach notification law requires “information holders” to notify residents of Tennessee within 45 days when their personal information was acquired, or reasonably believed acquired, by an unauthorized person following a “breach of system security”. As of 2020, every…