Overview
2022 has been relatively quiet as it relates to state updates to breach notification laws, but Maryland made significant alterations to its general data breach notification law. Additionally, several other states made more minor changes, and the federal government issued or proposed several new data security and breach reporting requirements for certain types of entities. Companies should take note of the updates in federal laws and guidance, demanding cybersecurity measures in order to maintain adequate security posture to best prevent ransomware and other cyberattacks.