Arizona Amends Data Breach Notification Laws

Arizona recently amended its data security breach notification laws to require covered entities to report data security breaches to the Director of the Arizona Department of Homeland Security in addition to the attorney general. A “covered entity” for these purposes includes a person that conducts business in the state and that owns or licenses unencrypted and unredacted computerized personal information. Entities subject to GLBA are exempt from Arizona’s data security breach notification laws.