Rhode Island House Bill H7883

Rhode Island 2022 Regular Session

• Introduced: 3/4/22
• Refer: 3/4/22

Caption

Identity Theft Protection Act Of 2015

Impact

The proposed amendments to the Identity Theft Protection Act strengthen current laws by expanding the definitions of breaches and requiring immediate reporting protocols. Any municipal agency or state entity that handles personal information must provide timely notifications regarding unauthorized access or use of that data. This could significantly alter the operational framework of state agencies concerning data management and incident reporting, ensuring higher standards of cybersecurity compliance across Rhode Island.

Summary

H7883, known as the Identity Theft Protection Act of 2015, aims to enhance the state's responses to cybersecurity threats by establishing a Cybersecurity Incident Response Group. This group, consisting of various state officials, is responsible for developing communication protocols in the event of a cybersecurity breach within any government agency or public body. The bill explicitly mandates the reporting of breaches within 24 hours and sets strict deadlines for notifying affected individuals, emphasizing the urgency and accountability in safeguarding personal information.

Contention

Notably, there may be concerns regarding the feasibility and practicality of the stringent notification timelines, particularly in large-scale breaches, where identifying affected individuals can be time-consuming. Critics might argue that such responsibilities burden agencies unreasonably without providing them sufficient resources or support to manage these new requirements efficiently. Moreover, while some lawmakers support the critical strengthening of identity theft protections, others may view this as an overreach that imposes excessive regulatory burdens on public institutions, affecting their workflow and resource allocation.