{"id":24594,"date":"2019-01-22T18:18:50","date_gmt":"2019-01-22T18:18:50","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29743\/North-Carolina-Reintroduces-Strict-Data-Breach-Notification-Law.html"},"modified":"2019-01-22T18:18:50","modified_gmt":"2019-01-22T18:18:50","slug":"north-carolina-reintroduces-strict-data-breach-notification-law","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/north-carolina-reintroduces-strict-data-breach-notification-law\/","title":{"rendered":"North Carolina Reintroduces Strict Data Breach Notification Law"},"content":{"rendered":"
\"proposed<\/header>\n
\n

By Jessica Davis<\/a><\/p>\n<\/div>\n

reintroduced<\/a> data privacy legislation that would give organizations just 30 days to report a breach.<\/p>\n

For healthcare providers in the state, the law would effectively cut in half the notification time outlined in HIPAA, which mandates breach notifications occur within 60 days of discovery. According to the proposal, the tighter notification will \u201callow people to freeze their credit across all major credit reporting agencies and take other measures to prevent identity theft before it occurs.\u201d<\/p>\n

Further, the bill would redefine a breach to include ransomware attacks, where the personal information is accessed and potentially not acquired. This is also particularly notable for healthcare organizations, as hackers continue to target the sector with ransomware attacks.<\/p>\n