There have been significant developments in data privacy, both Pennsylvania-centric and abroad. Some continue to emerge. Here are the top three.

Pennsylvania’s Insurance Data Security Act

In a little over a month, Pennsylvania joins the growing number of states having the National Association of Insurance Commissioners (NAIC) Model Law on Insurance Data Security governing the protection of “nonpublic information.” The statute defines “nonpublic information” as both consumer-related information and business-related information whose compromise “would cause a materially adverse impact” to the organization. Critically, the law is less a consumer protection statute and more of a statute focused on the protection of critical infrastructure of the U.S. economy.