Delaware Ramps Up Data Breach Compliance Mandates

Delaware companies now face more stringent data security and breach notification requirements under changes to state law, including an undefined requirement to maintain reasonable corporate security.

All 50 states and the District of Columbia have data breach notice laws. Delaware’s revised law makes it one of the few states to require companies, under specified circumstances, to provide one year of free credit monitoring services to individuals affected by a breach. California and Connecticut have similar requirements.

The amended Delaware law expands the definition of personal information, the breach of which triggers a duty to notify affected residents, to include medical ...