Pennsylvania passed a bill amending breach of security requirements. Under the bill, entities that maintain, store, or manage personal information (Entities) must provide a security breach notification to consumer credit reporting agencies if the security breach affects more than 500 (previously 1,000) Pennsylvania residents. The bill also added a requirement that Entities provide a security breach notification to the attorney general if a security breach affects more than 500 Pennsylvania residents. In addition, the bill requires Entities to provide access to a credit report and credit monitoring services in the event certain consumer information is obtained during a security breach. The bill becomes effective September 26, 2024.
CLick to view the PA Senate Bill 824: https://www.tenaco.com/wp-content/uploads/2024/08/PA-SB-824.pdf