Relating to the process for notifying the attorney general of a breach of security of computerized data by persons doing business in this state.
Impact
If enacted, HB1660 will amend Sections 521.053 (i) and (j) of the Business and Commerce Code, making it clear that businesses are required to notify the attorney general no later than 30 days after confirming a data breach. The bill aims to improve the transparency of data breaches affecting Texas residents and to enhance the state's ability to respond to such incidents. By establishing a clear protocol, the law aims to protect consumer information better and ensure that affected individuals are informed in a timely manner.
Summary
House Bill 1660 focuses on the notification process to the attorney general in the event of a data breach involving computerized data by businesses operating in the state of Texas. This bill revises the existing legal framework established by House Bill 3746, which mandated that businesses report breaches affecting 250 or more residents. HB1660 streamlines this requirement by mandating electronic notifications through a standardized form on the attorney general's website. This is intended to facilitate a more efficient reporting process for businesses after a data breach incident.
Sentiment
The sentiment surrounding HB1660 appears to be generally positive among lawmakers and stakeholders concerned with data security and consumer protection. Supporters argue that the bill represents a necessary evolution in breach notification laws that reflects technological advancements and modern compliance capabilities. However, there may be some concerns raised regarding the feasibility and readiness of all businesses to comply with the new electronic notification requirements, particularly smaller companies with limited resources.
Contention
While the bill seems well-received, there are discussions around the implications of mandated electronic notifications and whether all businesses have the capability to comply without significant operational burdens. Additionally, there is an underlying contention regarding the adequacy of the bill in addressing the complexities of data breaches, which can vary significantly in nature and impact. Ensuring that the notification process does not overwhelm the attorney general's office or lead to delays in consumer notifications is a critical point of consideration in the ongoing discussions.
Identical
Relating to the process for notifying the attorney general of a breach of security of computerized data by persons doing business in this state.
Relating to the establishment of a statewide human trafficking data repository within the office of the attorney general and to reporting of human trafficking data to the office of the attorney general and by the attorney general.
Providing for adoption by the Attorney General of a Statewide model policy related to the prevention of excessive force by law enforcement officers and school security personnel.
Relating to selection of an attorney by an indigent parent as attorney ad litem for the parent in certain suits affecting the parent-child relationship.