Wyoming Governor Mead Signs Breach Notice Amendment Bills

Bloomberg Law: Privacy & Data Security brings you single-source access to the expertise of Bloomberg Law’s privacy and data security editorial team, contributing practitioners,...

By Tripp Baltz

March 6—Wyoming Gov. Matt Mead (R) March 2 signed a bill (S.F. 36) that adds elements to the definition of personal identifying information in the state's identity theft and data breach notification laws, including taxpayer identification number, birth or marriage certificates, biometric data, medical history and health insurance information.

S.F. 36 removes from the present definition an individual's demand deposit account, savings account and employee identification numbers, place of employment and mother's maiden name.

Also March 2, Mead signed a bill (S.F. 35), which amends the state's data breach notification statute to specify the type of information required in a breach notice to affected Wyoming residents.

Under S.F. 35, data breach notices will have to include, among other things, the types of personal identifying information that were the subject of the breach, a general description of the breach, the approximate date of the breach and the actions taken to protect the system.

Wyoming enacted its breach notice statute in 2007.

Public Sector Standards 

On Feb. 25, Mead signed (S.F. 37) to require the Wyoming Department of Enterprise Technology Services to establish and enforce data privacy policies and standards for the state's “data infrastructure.”

The three measures were among six legislative recommendations included in an October 2014 report to the Wyoming Legislature by the Task Force on Digital Information Privacy.

All three of the new laws take effect July 1.

To contact the reporter on this story: Tripp Baltz in Denver at abaltz@bna.com

To contact the editor responsible for this story: Donald G. Aplin at daplin@bna.com

S.F. 35, the data breach notice contents bill, as cleared by the Legislature, is available at http://legisweb.state.wy.us/2015/Enroll/SF0035.pdf.

S.F. 36, the personal identifying information definition bill, as cleared by the Legislature, is available at http://legisweb.state.wy.us/2015/Enroll/SF0036.pdf.

S.F. 37, the state agency privacy standards bill, as cleared by the Legislature, is available at http://legisweb.state.wy.us/2015/Enroll/SF0037.pdf.