<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>State law breach notification websites</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16674" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=803142519-15072008><FONT face=Arial
color=#0000ff>Only a few of the state breach notice laws require reporting
to a government agency: <A
href="http://www.oag.state.md.us/idtheft/breacheNotices.htm">MD</A>, NC, NH, NY,
for sure. Those are the states that might have sites that publish
notifications.</FONT></SPAN></DIV><!-- Converted from text/rtf format -->
<P align=left><SPAN lang=en-us><FONT face=Arial size=2>Joanne McNabb,
CIPP/G</FONT><FONT face="Times New Roman"><BR></FONT><FONT face=Arial
size=2>Chief, California Office of Privacy Protection</FONT><FONT
face="Times New Roman"><BR></FONT></SPAN></P>
<DIV> </DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> dataloss-bounces@attrition.org
[mailto:dataloss-bounces@attrition.org] <B>On Behalf Of </B>Miller,
Terry<BR><B>Sent:</B> Tuesday, July 15, 2008 12:06 PM<BR><B>To:</B> Carter, Bill
(THIP, Corp); dataloss@attrition.org<BR><B>Subject:</B> Re: [Dataloss] State law
breach notification websites<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr align=left><SPAN class=261460119-15072008><FONT face=Arial
color=#0000ff size=2>Thanks Bill. I may not have been clear earlier.
I was actually looking for links to sites which publish notifications made
pursuant to state laws. I included as examples the sites hosted by MD and
NH. I feel I have been on such sites for NY and CA but can't find them
anymore. Are other users aware of such state sites? If so, I would
appreciate any information or links you may have.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=261460119-15072008><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=261460119-15072008><FONT face=Arial
color=#0000ff size=2>Terry</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> Carter, Bill (THIP, Corp)
[mailto:bill.carter@thehartford.com] <BR><B>Sent:</B> Tuesday, July 15, 2008
3:01 PM<BR><B>To:</B> Miller, Terry; dataloss@attrition.org<BR><B>Subject:</B>
RE: [Dataloss] State law breach notification websites<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr align=left><SPAN class=122485417-15072008><FONT face=Arial
color=#0000ff size=2>There are several pretty goods sites that have an index to
state breach notification laws. These two are pretty good. <A
href="http://privacylaw.proskauer.com/2007/12/articles/security-breach-notification-l/updated-breach-notification-laws/">http://privacylaw.proskauer.com/2007/12/articles/security-breach-notification-l/updated-breach-notification-laws/</A></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=122485417-15072008><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=122485417-15072008><FONT face=Arial
color=#0000ff size=2><A
href="http://www.ncsl.org/programs/lis/cip/priv/breachlaws.htm">http://www.ncsl.org/programs/lis/cip/priv/breachlaws.htm</A></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=122485417-15072008><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=122485417-15072008><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> dataloss-bounces@attrition.org
[mailto:dataloss-bounces@attrition.org] <B>On Behalf Of </B>Miller,
Terry<BR><B>Sent:</B> Tuesday, July 15, 2008 12:38 PM<BR><B>To:</B>
dataloss@attrition.org<BR><B>Subject:</B> [Dataloss] State law breach
notification websites<BR></FONT><BR></DIV>
<DIV></DIV><!-- Converted from text/rtf format -->
<P><FONT face=Arial size=2>Does anyone know if there is a central listing of
websites for breach notifications made pursuant to state laws? For
example, here is Maryland's site: </FONT><A
href="http://www.oag.state.md.us/idtheft/breacheNotices.htm"><U><FONT face=Arial
color=#0000ff
size=2>http://www.oag.state.md.us/idtheft/breacheNotices.htm</FONT></U></A><FONT
face=Arial size=2>. I was made aware of New Hampshire's: </FONT><A
href="http://doj.nh.gov/consumer/breaches.html"><U><FONT face=Arial
color=#0000ff
size=2>http://doj.nh.gov/consumer/breaches.html</FONT></U></A><FONT face=Arial
size=2>.</FONT></P>
<P><FONT face=Arial size=2>Terry</FONT> </P><PRE>Confidentiality Notice: This email, including attachments, may include non-public, proprietary, confidential or legally privileged information. If you are not an intended recipient or an authorized agent of an intended recipient, you are hereby notified that any dissemination, distribution or copying of the information contained in or transmitted with this e-mail is unauthorized and strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and permanently delete this e-mail, its attachments, and any copies of it immediately. You should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you
</PRE><FONT
size=3><BR><BR>*************************************************************************<BR>This
communication, including attachments, is<BR>for the exclusive use of addressee
and may contain proprietary,<BR>confidential and/or privileged information. If
you are not the intended<BR>recipient, any use, copying, disclosure,
dissemination or distribution is<BR>strictly prohibited. If you are not the
intended recipient, please notify<BR>the sender immediately by return e-mail,
delete this communication and<BR>destroy all
copies.<BR>*************************************************************************<BR></FONT><PRE>Confidentiality Notice: This email, including attachments, may include non-public, proprietary, confidential or legally privileged information. If you are not an intended recipient or an authorized agent of an intended recipient, you are hereby notified that any dissemination, distribution or copying of the information contained in or transmitted with this e-mail is unauthorized and strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and permanently delete this e-mail, its attachments, and any copies of it immediately. You should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you
</PRE></BODY></HTML>