KLS Keeping Law Simple Legislation in plain English

Straight-ahead summaries built from the official bill text. We keep the source links front and center and leave the decision up to you.

Back to Wyoming

SF0035 • 2015

Security breach notification.

AN ACT relating to consumer protection; specifying notice requirements to consumers affected by breaches of personal identifying information; providing exceptions; and providing for an effective date.

Elections
Enacted

This bill passed the Legislature and reached final enactment based on the latest official action.

Sponsor
Corporations
Last action
2015-03-03
Official status
enrolled
Effective date
7/1/2015

Plain English Breakdown

The plain English breakdown is still being put together. The official documents below are already here.

Amendments

These notes stay tied to the official amendment files and metadata from the legislature.

SF0035H3001

3rd reading • Throne

Adopted

Plain English: Adopted 3rd reading by Throne

  • This amendment summary is using official source text because generated interpretation was skipped for this run.
  • The official amendment text was available, but an easy plain-English summary could not be produced automatically during the last sync.
SF0035SS001

Standing Committee • SCorporations

Adopted

Plain English: Adopted Standing Committee by SCorporations

  • This amendment summary is using official source text because generated interpretation was skipped for this run.
  • The official amendment text was available, but an easy plain-English summary could not be produced automatically during the last sync.

Bill History

  1. 2015-03-03 LSO

    Assigned Chapter Number

  2. 2015-03-03 Governor

    Governor Signed SEA No. 0022

  3. 2015-02-26 House

    H Speaker Signed SEA No. 0022

  4. 2015-02-23 Senate

    S President Signed SEA No. 0022

  5. 2015-02-23 LSO

    Assigned Number SEA No. 0022

  6. 2015-02-23 Senate

    S Concur:Passed 29-1-0-0-0

  7. 2015-02-20 Senate

    S Received for Concurrence

  8. 2015-02-20 House

    H 3rd Reading:Passed 59-0-1-0-0

  9. 2015-02-20 House

    Amendment Adopted

  10. 2015-02-19 House

    H 2nd Reading:Passed

  11. 2015-02-18 House

    H COW:Passed

  12. 2015-02-17 House

    H Placed on General File

  13. 2015-02-17 House

    Corporations:Recommend Do Pass 9-0-0-0-0

  14. 2015-02-06 House

    H Introduced and Referred to H07 - Corporations

  15. 2015-02-02 House

    H Received for Introduction

  16. 2015-01-30 Senate

    S 3rd Reading:Passed 30-0-0-0-0

  17. 2015-01-29 Senate

    S 2nd Reading:Passed

  18. 2015-01-28 Senate

    S COW:Passed

  19. 2015-01-28 Senate

    Amendment Adopted

  20. 2015-01-27 Senate

    S Placed on General File

  21. 2015-01-27 Senate

    Corporations:Recommend Amend and Do Pass 4-0-0-1-0

  22. 2015-01-14 Senate

    S Introduced and Referred to S07 - Corporations

  23. 2015-01-13 Senate

    S Received for Introduction

  24. 2014-12-31 LSO

    Bill Number Assigned

Official Summary Text

Summary for LSO115
Bill No.:
SF0035
Effective
:
7/1/2015

LSO No.:
15LSO-0133

Enrolled Act No.:
SEA 22

Chapter No.:
65

Prime Sponsor:
Joint Corporations, Elections & Political Subdivisions Interim Committee

Catch Title:
Security breach notification.

Subject:
Security breach notification requirements.

Summary/Major Elements:

Under current law, an individual or commercial entity that conducts business in Wyoming and owns or licenses computerized data that includes personal identifying information shall notify consumers affected by breaches of personal identifying information. Notice shall include a toll-free number the individual may use to contact the person collecting the data and from which the individual may learn the toll-free contact telephone numbers and addresses for the major credit reporting agencies.
This bill repeals the current notice requirements and specifies that notice shall include:
The types of personal identifying information that were or are reasonably believed to have been the subject of the breach;
A general description of the breach incident;
The approximate date of the breach of security;
T
he actions taken by the individual or commercial entity to protect the system containing the personal identifying information from further breaches;
Advice that directs the person to remain vigilant by reviewing account statements and monitoring credit reports;
Whether notification was delayed as a result of
a law enforcement investigation.
This bill also creates an exception to the notice requirements for covered entities or business associates that are subject to and comply with the Health Insurance Portability and Accountability Act.
The above summary is not an official publication of the Wyoming Legislature and is not an official statement of legislative intent. While the Legislative Service Office endeavored to provide accurate information in this summary, it should not be relied upon as a comprehensive abstract of the bill.

Current Bill Text

Read the full stored bill text 
ORIGINAL
Senate
File No
.
SF0035

ENROLLED ACT NO.
22
,

SENATE

SIXTY-THIRD LEGISLATURE OF THE STATE OF WYOMING
2015 General Session

AN ACT relating to consumer protection; specifying notice requirements to consumers affected by breaches of personal identifying information; providing exceptions; and providing for an effective date.

Be It Enacted by the Legislature of the State of Wyoming:

Section 1
.

W.S. 40
‑
12
‑
502(e)(intro)
,
by creating n
ew paragraphs (ii) through (vii
) a
nd by creating
a
new subsection
(h)
is
amended to read:

40
‑
12
‑
502
.

Computer security breach; notice to affected persons.

(e)

Notice required under subsection (a) of this section shall
be clear and conspicuous and shall
include
, at a minimum
:

(ii)

The types of personal identifying information that were or are reasonably believed to have been the subject of the breach;

(iii)

A general description of the breach incident;

(iv)

The approximate date of the breach of security, if that information is reasonably possible to determine at the time notice is provided;

(v)

In general terms, the actions taken by the individual or commercial entity to protect the system containing the personal identifying information from further breaches;

(vi)

Advice that directs the person to remain vigilant by reviewing account statements and monitoring credit reports;

(vii)

Whether notification was delayed as a result of a law enforcement investigation, if that information is reasonably possible to determine at
the time the notice is provided.

(h)

A covered entity
or business associate
that is subject to and complies with the Health Insurance Portability and Accountability Act, and the regulations promulgated under that act, 45 C.F.R. Parts 160 and 164, is deemed to be in compliance with this section if the covered entity
or business associate
notifies affected Wyoming customers
or entities
in compliance with the requirements of the Health Insurance Portability and Accountability Act and 45 C.F.R. Parts 160 and 164.
Section
2
.

This
act is effective July 1,
2015
.

(END)

Speaker of the House

President of the Senate

Governor

TIME APPROVED: _________

DATE APPROVED: _________

I hereby certify that this act originated in the
Senate
.

Chief Clerk

1