Online portal streamlines data breach reporting for companies under new Pa. law

PHILADELPHIA (KYW Newsradio) — The Pennsylvania Office of Attorney General has created an online portal where companies can report data breaches as part of a new law that is set to take effect later this month.

The state law — the Breach of Personal Information Notification Act — requires any company or entity that holds onto personal data to report when it experiences a data breach of that personal information.

Companies must report breaches that affect 500 Pennsylvanians or more.

As part of the new law, companies must also provide credit monitoring for a year if the data includes bank accounts, Social Security numbers, or driver’s license or ID numbers.

The Attorney General’s Office launched an online portal that streamlines how companies submit information about breaches.

Attorney General Michelle Henry said she hopes the new website makes the process of reporting easier for businesses.