United States of America: Implemented Online Data Security and Privacy Amendments (SB 98)

On 1 May 2024, the Bill Online Data Security and Privacy Amendments (SB 98) was implemented. The Bill amends the definition of a data breach under section 63A-16-1101 of the Utah Code, defining a data breach as unauthorised access, acquisition, disclosure, loss of access, or destruction of personal data, or data that compromises the security, confidentiality, availability, or integrity of the computer systems utilised or information maintained by the entity. Furthermore, the Bill requires entities to notify the Office of the Attorney General or the Utah Cyber Center of a data breach and provide information such as the dates of breach and discovery, the number affected, the type of information compromised, and a brief description of the breach.