
Under a law enacted in 2015, any business, individual, or public agency that is required to issue a security breach notification to more than 500 Washington residents as a result of a single security breach shall electronically submit a single sample copy of that security breach notification, excluding any personally identifiable information, to the Attorney General.ĭuring the 2019 Legislative Session the Attorney General proposed request-legislation to strengthen Washington’s Data Breach Notification laws. HB 1071 passed unanimously out of both chambers of the Legislature, and was signed into law on May 7, 2019, to go into effect on March 1, 2020. For more information on these updates, see the HB 1071 FAQ page. Washington law requires businesses, individuals, and public agencies to notify any Washington resident who is at risk of harm because of the unauthorized acquisition of data that compromises the security, confidentiality, or integrity of that resident’s personal information.
