Cybersecurity and data privacy risks continue to loom large with potentially significant consequences. [1] The structure and format of the Oklahoma statute largely tracks the Ohio, Connecticut and Utah statutes. [3] However, while the other state statutes apply generally to all businesses, the Oklahoma statute only provides an affirmative defense tohospitals. Tennessee: New Privacy RequirementsTennessee’s recently enacted statute includes a “safe harbor” provision but, unlike the other states discussed here, in the privacy – and not the cybersecurity – context. [18] Only the attorney general has authority to enforce the act, so the affirmative defense is not applicable to general tort claims brought by consumers.

Source: Forbes December 18, 2023 17:09 UTC