In an era where data privacy is a paramount concern, individual states are taking steps to broaden the definitions within their data breach notification statutes, recognizing new types of personal data. Consistent with recent trends, Connecticut and Florida have included geolocation data in their definitions of personal information.
Geolocation data, which refers to information that identifies the specific geographical location of an individual or device, is now considered personal data in these states. This move marks a significant development in data privacy laws, emphasising the need for businesses to adhere to stringent data protection requirements. Failure to appropriately secure such information may lead to breaches and, subsequently, the need to notify affected individuals.
These changes came into effect in Connecticut as of October 1. The Sunshine state of Florida will enforce the new definition from July 1, 2024. These developments reaffirm the need for companies to stay up to date with changing definitions and laws surrounding data privacy, to ensure they remain in compliance.
State data breach notification statutes are continually evolving, reflecting the changes in technology and the type of data collected by companies. Businesses and legal professionals must closely monitor these shifts. Given the increasing magnitude of data breaches, these updates to legislations are likely a proactive strategy to protect consumers and enhance accountability.
This report was provided by BakerHostetler, a leading law firm providing counsel to clients in a wide variety of industries, businesses, and governmental agencies.