Preparing for the General Data Protection Regulation (GDPR) has been the top priority for privacy professionals in recent months. The GDPR was put forth by the European Union (EU) and goes into effect in May 2018. The regulation includes some of the tightest data breach notification deadlines and potential penalties of any of the existing privacy regulations globally.
But what’s lurking in the shadow of the GDPR? There are other changes to data breach notification regulations that took effect in 2018. Privacy professionals around the world need to take note and tackle these regulations too.
Australia’s Notifiable Data Breaches Scheme
The Notifiable Data Breaches Scheme in Australia, which went into effect in February 2018, requires Australian businesses and government agencies to quickly notify affected individuals of data breach incidents that pose a likely risk of serious harm. Notification to the Australian Information Commissioner will also be required.
Listen to the podcast: What You Need to Know about the Changes to the Australian Privacy Act
Canada’s Personal Information Protection and Electronic Documents Act
Canada’s mandatory notification requirement under the Personal Information Protection and Electronic Documents Act (PIPEDA) was enforced in early 2018. Under PIPEDA, notification to the individual and the Office of the Privacy Commissioner of Canada will be required when there is a real risk of significant harm to the affected individual.
Maryland and Delaware Privacy Regulations
In the U.S., Maryland and Delaware amended their current data breach notification statutes in 2018. Both states are following in the footsteps of several other states by imposing tighter notification time frames. Maryland implemented a 45-day notification timeline, and Delaware will require affected individuals to be notified within 60 days. Both states have also expanded upon their definition of personal information.
Data breach notification requirements are constantly evolving, and organizations globally must ensure they keep up to date with the changes to remain compliant. It’s never too soon to consider future requirements and how they will affect your business practices.
Learn how the IBM Resilient Security Orchestration, Automation, and Response (SOAR) Platform can help make your privacy breach notification process fast, efficient and compliant.
Notice: Clients are responsible for ensuring their own compliance with various laws and regulations, including GDPR. IBM does not provide legal advice and does not represent or warrant that its services or products will ensure that clients are in compliance with any law or regulation. Learn more about IBM’s own GDPR readiness journey and our GDPR capabilities and offerings to support your compliance journey here.