Washington passed a bill amending breach of security disclosure requirements. Under the bill, a person that owns or licenses personal information of a Washington resident must provide a security breach disclosure to all affected Washington residents and to the attorney general within 30 days of a breach of security (rather than 45 days). The bill also amended the information that must be included in a security breach disclosure provided to affected Washington residents and to the attorney general. In addition, the bill revised the definition of “personal information”. The bill becomes effective March 1, 2020.
See Washington State Legislature website for the full text of the Statutes:
http://lawfilesext.leg.wa.gov/biennium/2019-20/Pdf/Bills/Session%20Laws/House/1071-S.SL.pdf
