Services / Privacy Compliance / Pennsylvania
Breach and consumer notification laws in Pennsylvania — what a business must do when personal information is lost or exposed.
Did you know? Every state sets its own rules for when a breach is reportable, who must be told and how. In Pennsylvania:
A detailed list governs what is considered “personally identifiable information”
There are specific considerations when determining if a breach is reportable in Pennsylvania
There are comprehensive requirements for the information included in notifications
Notifications may only be given by specific methods
If your breach affects residents of other states, you must notify them under that state’s rules
There are vendor-specific notification requirements
Consumer reporting agencies must be notified in certain circumstances
A violation of the Breach of Personal Information Notification Act is deemed an unfair or deceptive practice; the Attorney General has exclusive authority to bring an action
Federal laws, industry regulations and out-of-country laws may also apply
Please note
This summary of regulations is provided for information purposes only. No action based on this summary alone should be undertaken. Each individual or entity must obtain appropriate guidance for its specific circumstances.
© 2018 CSR. All rights reserved. CSR refers to the corporation CSR Professional Services, Inc.
Readiness Pro
CSR Readiness Pro and the Breach Reporting Service handle the reporting and notification rules for you.
Mon – Fri · 8:00am – 5:30pm
Privacy compliance
Get started
Secure, scheduled shredding is the simplest way to keep paper records out of a breach report. Save 10% on your initial shred.
Mon – Fri · 8:00am – 5:30pm
