Key Points:
- New online portal streamlines data breach reporting for incidents affecting over 500 PA residents
- Mandatory reporting to AG’s office starts September 26, 2024
- Companies must provide 12 months of credit monitoring in certain breach scenarios
Pennsylvania Attorney General Michelle Henry has unveiled a new online portal designed to simplify the process of reporting data breaches that impact more than 500 state residents. This development comes as a response to recent amendments to Pennsylvania’s Breach of Personal Information Notification Act (BPINA), set to take effect on September 26.
The details:
- The new portal, accessible via the Office of the Attorney General’s website, provides a step-by-step process for submitting required information about data breaches.
- Credit reporting companies and other entities holding personal data are now mandated to report breaches to the AG’s office.
- In cases where a breach involves a person’s name along with their Social Security number, bank account number, or driver’s license/state ID number, companies must offer affected individuals:
- 12 months of credit monitoring
- Access to a credit report
What they are saying: “This new requirement in the law will offer Pennsylvanians more protections and prompt notifications when sensitive information, such as account numbers and personal data, is compromised,” said Attorney General Henry. “We have launched this portal to make the process easier and more efficient for businesses.”
The bottom line: With the new reporting requirements set to take effect soon, companies operating in Pennsylvania should familiarize themselves with the BPINA updates and utilize the portal to ensure compliance. This proactive approach will help mitigate potential legal risks and maintain consumer trust in the face of data breaches.
