State Data Breach Notification Matrix Update - Texas And Connecticut

It's time for an updated version of our "Mintz Matrix" – the Mintz Levin matrix of state data security breach notification laws. We update this matrix quarterly, or as developments dictate.

The Fall 2012 version can be found at Data Breach Notification Matrix

In this update, we call particular attention to changes in the following states:

Texas – The amendment to the Texas breach notification statute took effect September 1, 2012. We previously blogged about these amendments, which could be construed to now act as a 50-state breach notification statute. It requires entities that conduct business in Texas to provide notice to both affected Texas residents and to non-residents if the non-resident lives in a state that does not require notification of the security breach. As of today, those states include Alabama, Kentucky, New Mexico and South Dakota. The amendment also increased penalties for violations to $100 per affected individual per day of failed or delayed notification, up to...