Security News > 2020 > March > D.C. Council Passes Data Security Legislation
The Council of the District of Columbia on Tuesday unanimously passed a bill whose goal is to expand data breach notification requirements and improve the way organizations protect personal information.
Introduced in March 2019 by the Office of the Attorney General for the District of Columbia, the Security Breach Protection Amendment Act of 2019 expands the types of information for which companies are held accountable.
Existing legislation covers social security numbers, payment card details, and driver's license numbers.
The new legislation also requires companies to implement measures for protecting personal information, it specifies new reporting requirements for companies whose systems have been breached, and requires firms to provide free identity protection services for 18 months if they expose social security numbers.
A representative of the OAG told SecurityWeek that the council will now send the bill to the mayor, who has 10 days to either sign the legislation or veto it.