Data Security Breach Notification Laws and Individual Privacy

Lab Report

Table of Contents
How data security breach notification laws of state government relate to individual privacy................2
Implementation of data security breach notification laws by government.............................................3
Privacy protection rights of a citizen.....................................................................................................3
References.............................................................................................................................................5
1

How data security breach notification laws of state government related to individual
privacy
The data security breach notification law of the government of the state protects the privacy
of an individual. The laws have been designed for protecting the personal information of a
resident of Virginia. The laws have been developed to notify the victims about the security
breach. Individual privacy is being protected by safeguarding the information that can be
used in determining fraud/theft by forcing the organization to face penalties or punishment or
protect the information. The organizations should disclose immediately the data breach to the
customers (Lis, 2018).
Virginia consists of two breach notification laws that are a general statue and la related to the
health care information. Most of the states in Virginia have general data breach statues which
directs how the organizations are needed to respond. The statue consists of the following:
 Specific techniques of the notification delivery;
 The owners of data are responsible for the notifications and reporting;
 The notification can be needed to the consumer reporting agencies, state attorney
general and commissioner of health;
 The laws also cover record retention and data protection;
 Other industry regulation, federal laws and other state laws can also be applicable.
The "medical information" is referred to the first initial or name and last name of a person
with an arrangement and related to one or more elements of the data that are associated with
the citizen of the commonwealth. It is done when the elements of data are neither redacted
nor encrypted:
 Any information associated with mental or medical health history, medical diagnosis
or treatment and the physical or mental condition of an individual.
 A subscriber identification number or health insurance policy number of an
organization. Apart from this, any unique identifier which is being used by the health
insurer for determining information or the individual in the claims and application
history consisting of any appeals records.
2