If It Fits, You Must Encrypt

June 24, 2011
A couple of years ago, following the ChoicePoint security breach incident, state legislatures rushed to pass security breach notification laws. Now

A couple of years ago, following the ChoicePoint security breach incident, state legislatures rushed to pass security breach notification laws. Now some states are beginning to mandate encryption for the transmission of personal information. This legislative trend is still in the early stages, but it appears to be gathering momentum.

Nevada is taking the lead in this area with Nevada Revised Statute 597.970, which becomes effective on October 1, 2008. The Nevada law requires encryption in transit for all personal information. Specifically, NRS 597.970 states: "[A] business in this State shall not transfer any personal information of a customer through an electronic transmission other than a facsimile to a person outside of the secure system of the business unless the business uses encryption to ensure the security of electronic transmission."

The Nevada law does not specify what form of encryption is acceptable, and it is likely to apply to any business with significant contacts with, or business in, Nevada. As a result, the Nevada statute may drive security compliance planning of national companies just as S.B. 1386, California's seminal security breach notification law, once did. Massachusetts has already passed a law mandating encryption and legislatures in Michigan (S.B. 1022) and Washington (H.B. 2838 and H.B. 2574) have introduced similar bills.

Legislating data security measures is a dangerous trend, particularly if these laws start mandating the use of specific encryption standards. Let's hope this emerging trend doesn't lead to a patchwork of varying state encryption requirements.

Sponsored Recommendations

Going Beyond the Smart Room: Empowering Nursing & Clinical Staff with Ambient Technology, Observation, and Documentation

Discover how ambient AI technology is revolutionizing nursing workflows and empowering clinical staff at scale. Learn about how Orlando Health implemented innovative strategies...

Enabling efficiencies in patient care and healthcare operations

Labor shortages. Burnout. Gaps in access to care. The healthcare industry has rising patient, caregiver and stakeholder expectations around customer experiences, increasing the...

Findings on the Healthcare Industry’s Lag to Adopt Technologies to Improve Data Management and Patient Care

Join us for this April 30th webinar to learn about 2024's State of the Market Report: New Challenges in Health Data Management.

Findings on the Healthcare Industry’s Lag to Adopt Technologies to Improve Data Management and Patient Care

2024's State of the Market Report: New Challenges in Health Data Management