- Four states have yet to enact a data breach notification law: Alabama, Kentucky, New Mexico and South Dakota.
- According to Imation’s analysis, Virginia has the most strict law in the nation. The law provides specific requirements on what is to be included in a breach notification, requires government and credit reporting agency notification, and includes a large financial penalty relative to other states.
- A few states, including Virginia, require notification even if breached data is encrypted—if the encrypted data was stolen along with the encryption keys.
Imation does not intend for this research to constitute a legal review of the laws, and in no way are the results of this research intended to be legal advice. Companies should consult with their legal counsel before making any decisions regarding legal compliance.For more information, please visit www.imation.com/compliancemap. About Imation Imation is a global scalable storage and data security company. Our portfolio includes tiered storage and security offerings for business, and products designed to manage audio and video information in the home. Imation reaches customers in more than 100 countries through a powerful global distribution network and well recognized brands. For more information please visit www.imation.com. Imation and the Imation logo are trademarks of Imation Corp and its subsidiaries. Photos/Multimedia Gallery Available: http://www.businesswire.com/cgi-bin/mmg.cgi?eid=50388535&lang=en