Millions of Americans have received similar data breach notices from employers, government agencies, medical centers, banks and retailers.
It also calls for data breach notices to be included in rules, and for broadband providers to be held accountable for any failure to take suitable precautions to protect personal data collected from users.
State data breach notification laws are a notoriously complex regulatory morass, with each state imposing different requirements about the types of data that trigger the notice requirements and the precise form of notification that is required.
By now, reports of lost or stolen business devices are so common that many people open data-breach notices from their banks, insurers, medical institutions, schools and state agencies with something like resignation.
For instance, while some states explicitly require consumer notices to describe the general circumstances surrounding the data breach, Massachusetts explicitly prohibits consumer notices from describing "the nature of the breach".
The lawsuit further accuses Equifax of violating California state law, failure to provide a timely notice of the data breach to affected Californians and failure to provide complete, plain and clear information.
Another day, another payment card data breach.
The retailers were hit by a payment card data breach.
"Uber violated Pennsylvania law by failing to put our residents on timely notice of this massive data breach," Shapiro said in a press release.
For one advocate working on integrating technology into public service, the data breach is a red flag that should have some municipalities on notice… and raise concerns about the consolidation among vendors in the market.
