Comparison between Laws of Pennsylvania and California Assignment 2022

UNIVERSITY
Information Security Laws
Comparison between Laws of Pennsylvania and California
Student Credentials
10/29/2019
This assignment discusses the Information Security laws of two main states in United
States, Pennsylvania and California. The summary of laws of both states and comparison
between them is analyzed below.

Cyber Laws 1
Information Technology Laws of Pennsylvania
The state of Pennsylvania has information technology based laws that focus mainly on the
privacy policy statements that are untrue and deceiving in nature published on websites or the
ones that are distributed in the business practices statute. The state of Pennsylvania has two
major online laws that it focuses on:
1. Breach of Personal Information Notification Act (BPINA): The BPINA
incorporated in 2005. According to this Act, the Personal Information (as defined
under this act) shall be protected by the businesses using them. In case of any breach
by any hacker or any other unwelcomed party, the businesses and the third party
providers have to notify the users regarding the breach of their personal information.
The residents can also go ahead and take legal action against such a business that
neglects their duty to inform the users about the same as they consider it as a
misleading trade practice (Bernstein, 2005).
2. Social Security Number Privacy Act: This Act came into existence in 2006 in order
to reduce the harm caused due to the breach of data. This Act was introduced so that
the residents instead of providing the Social Security Number directly could provide
alternates. This way the Social Security Numbers could be protected from any
security breach (Lear & Reynolds, 2003).
Information Technology Laws of California
The regulations and rules related to security of data, in California are administered by
the businesses or people who collect and maintain Personally Identifiable Information (PII)
and the third party contractors as well. The basic idea behind all legislations regarding data
breach is to prevent any breach at first and secondly, to provide the information regarding any