CyberScoop: LastPass breach exposes how US breach notification laws can leave consumers in the lurch

January 11, 2023

“It’s really messy,” says Chris Frascella, who studies consumer privacy at the Electronic Privacy Information Center, a nonprofit research group. “What you’re required to report in Alabama may not be something that you have to report in Connecticut.”

Because many technology companies are based in California or collect significant amounts of data on the state’s residents, this means they often must adhere to California’s fairly strong privacy law, and when this standard is more rigorous than in other states, companies will implement the California law across the board, Frascella added.

Read the full article here.

Support Our Work

EPIC's work is funded by the support of individuals like you, who allow us to continue to protect privacy, open government, and democratic values in the information age.