Pennsylvania Updates Data Breach Law for Compliance

Understanding Pennsylvania's Updated Data Breach Notification Law

Earlier this year, Governor Josh Shapiro signed amendments to Pennsylvania’s Breach of Personal Information Notification Act (BPINA). These changes, effective from September 26, include the launch of an online portal for companies to report data breaches affecting over 500 Pennsylvania residents. Companies must notify the Attorney General (AG) Michelle Henry without "unreasonable delay," aligning Pennsylvania with 35 other states that have similar requirements.