<HTML dir=ltr><HEAD><TITLE>State law breach notification websites</TITLE>
<META http-equiv=Content-Type content="text/html; charset=unicode">
<META content="MSHTML 6.00.6000.16674" name=GENERATOR></HEAD>
<BODY>
<DIV id=idOWAReplyText18106 dir=ltr>
<DIV dir=ltr><FONT face="Times New Roman" color=#000000 size=3>Wisconsin is another that publishes the data. I dont know about NC and NY though.</FONT></DIV>
<DIV dir=ltr><FONT face="Times New Roman" color=#000000 size=3></FONT> </DIV>
<DIV dir=ltr><A href="http://privacy.wi.gov/databreaches/databreaches.jsp">http://privacy.wi.gov/databreaches/databreaches.jsp</A></DIV>
<DIV dir=ltr> </DIV>
<DIV dir=ltr><A href="http://www.oag.state.md.us/idtheft/breacheNotices.htm">http://www.oag.state.md.us/idtheft/breacheNotices.htm</A></DIV>
<DIV dir=ltr> </DIV>
<DIV dir=ltr><A href="http://doj.nh.gov/consumer/breaches.html">http://doj.nh.gov/consumer/breaches.html</A></DIV>
<DIV dir=ltr> </DIV>
<DIV dir=ltr> </DIV>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2>Brian Krebs</FONT></DIV></DIV>
<DIV id=idSignature40410 dir=ltr>
<DIV><FONT face=Arial size=2><A href="http://www.washingtonpost.com/securityfix">www.washingtonpost.com/securityfix</A></FONT></DIV>
<DIV><FONT face=Arial size=2>703-469-3162 (w)</FONT></DIV>
<DIV><FONT face=Arial size=2>703-989-0727 (c)</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></DIV>
<DIV dir=ltr><BR>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> dataloss-bounces@attrition.org on behalf of McNabb, Joanne@OISPP<BR><B>Sent:</B> Tue 7/15/2008 3:32 PM<BR><B>To:</B> Miller, Terry; Carter, Bill (THIP, Corp); dataloss@attrition.org<BR><B>Subject:</B> Re: [Dataloss] State law breach notification websites<BR></FONT><BR></DIV>
<DIV>
<DIV dir=ltr align=left><SPAN class=803142519-15072008><FONT face=Arial color=#0000ff>Only a few of the state breach notice laws require reporting to a government agency: <A href="http://www.oag.state.md.us/idtheft/breacheNotices.htm">MD</A>, NC, NH, NY, for sure. Those are the states that might have sites that publish notifications.</FONT></SPAN></DIV>
<P align=left><SPAN lang=en-us><FONT face=Arial size=2>Joanne McNabb, CIPP/G</FONT><FONT face="Times New Roman"><BR></FONT><FONT face=Arial size=2>Chief, California Office of Privacy Protection</FONT><FONT face="Times New Roman"><BR></FONT></SPAN></P>
<DIV> </DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> dataloss-bounces@attrition.org [mailto:dataloss-bounces@attrition.org] <B>On Behalf Of </B>Miller, Terry<BR><B>Sent:</B> Tuesday, July 15, 2008 12:06 PM<BR><B>To:</B> Carter, Bill (THIP, Corp); dataloss@attrition.org<BR><B>Subject:</B> Re: [Dataloss] State law breach notification websites<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr align=left><SPAN class=261460119-15072008><FONT face=Arial color=#0000ff size=2>Thanks Bill. I may not have been clear earlier. I was actually looking for links to sites which publish notifications made pursuant to state laws. I included as examples the sites hosted by MD and NH. I feel I have been on such sites for NY and CA but can't find them anymore. Are other users aware of such state sites? If so, I would appreciate any information or links you may have.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=261460119-15072008><FONT face=Arial color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=261460119-15072008><FONT face=Arial color=#0000ff size=2>Terry</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> Carter, Bill (THIP, Corp) [mailto:bill.carter@thehartford.com] <BR><B>Sent:</B> Tuesday, July 15, 2008 3:01 PM<BR><B>To:</B> Miller, Terry; dataloss@attrition.org<BR><B>Subject:</B> RE: [Dataloss] State law breach notification websites<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr align=left><SPAN class=122485417-15072008><FONT face=Arial color=#0000ff size=2>There are several pretty goods sites that have an index to state breach notification laws. These two are pretty good. <A href="http://privacylaw.proskauer.com/2007/12/articles/security-breach-notification-l/updated-breach-notification-laws/">http://privacylaw.proskauer.com/2007/12/articles/security-breach-notification-l/updated-breach-notification-laws/</A></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=122485417-15072008><FONT face=Arial color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=122485417-15072008><FONT face=Arial color=#0000ff size=2><A href="http://www.ncsl.org/programs/lis/cip/priv/breachlaws.htm">http://www.ncsl.org/programs/lis/cip/priv/breachlaws.htm</A></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=122485417-15072008><FONT face=Arial color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=122485417-15072008><FONT face=Arial color=#0000ff size=2></FONT></SPAN> </DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> dataloss-bounces@attrition.org [mailto:dataloss-bounces@attrition.org] <B>On Behalf Of </B>Miller, Terry<BR><B>Sent:</B> Tuesday, July 15, 2008 12:38 PM<BR><B>To:</B> dataloss@attrition.org<BR><B>Subject:</B> [Dataloss] State law breach notification websites<BR></FONT><BR></DIV>
<DIV></DIV>
<P><FONT face=Arial size=2>Does anyone know if there is a central listing of websites for breach notifications made pursuant to state laws? For example, here is Maryland's site: </FONT><A href="http://www.oag.state.md.us/idtheft/breacheNotices.htm"><U><FONT face=Arial color=#0000ff size=2>http://www.oag.state.md.us/idtheft/breacheNotices.htm</FONT></U></A><FONT face=Arial size=2>. I was made aware of New Hampshire's: </FONT><A href="http://doj.nh.gov/consumer/breaches.html"><U><FONT face=Arial color=#0000ff size=2>http://doj.nh.gov/consumer/breaches.html</FONT></U></A><FONT face=Arial size=2>.</FONT></P>
<P><FONT face=Arial size=2>Terry</FONT> </P><PRE>Confidentiality Notice: This email, including attachments, may include non-public, proprietary, confidential or legally privileged information. If you are not an intended recipient or an authorized agent of an intended recipient, you are hereby notified that any dissemination, distribution or copying of the information contained in or transmitted with this e-mail is unauthorized and strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and permanently delete this e-mail, its attachments, and any copies of it immediately. You should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you
</PRE><FONT size=3><BR><BR>*************************************************************************<BR>This communication, including attachments, is<BR>for the exclusive use of addressee and may contain proprietary,<BR>confidential and/or privileged information. If you are not the intended<BR>recipient, any use, copying, disclosure, dissemination or distribution is<BR>strictly prohibited. If you are not the intended recipient, please notify<BR>the sender immediately by return e-mail, delete this communication and<BR>destroy all copies.<BR>*************************************************************************<BR></FONT><PRE>Confidentiality Notice: This email, including attachments, may include non-public, proprietary, confidential or legally privileged information. If you are not an intended recipient or an authorized agent of an intended recipient, you are hereby notified that any dissemination, distribution or copying of the information contained in or transmitted with this e-mail is unauthorized and strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and permanently delete this e-mail, its attachments, and any copies of it immediately. You should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you
</PRE></DIV></BODY></HTML>