Remove 2003 Remove Evaluation Remove Healthcare Remove Risk Management
article thumbnail

Statutory Cyber Incident Reporting in the USA

Plan B Consulting

The first state to have this type of law was California in 2003 and all states have, on the whole, followed the basic tenets of their law. Healthcare and public health. In some states, the law permits delayed notification “if a law enforcement agency determines that it would impede a criminal investigation”. Financial services.

Banking 40