AG: Companies can easily report data breaches online ahead of new PA law

HARRISBURG, Pa. (WTAJ) — With companies required by law to report data breaches in Pennsylvania starting Sept. 26, the process has now become much easier.

State Attorney General Michelle Henry announced Monday a new online portal for credit reporting companies and other entities that collect personal data to make reports. These reports must be made to the AG’s office due to a recent amendment to Pennsylvania’s Breach of Personal Information Notification Act (BPINA).

“This new requirement in the law will offer Pennsylvanians more protections and prompt notifications when sensitive information, such as account numbers and personal data, is compromised,” Henry said. “We have launched this portal to make the process easier and more efficient for businesses who are required to make these notifications.”

Governor Josh Shapiro approved amendments in June for reporting when more than 500 Pennsylvania residents are affected by a data breach.

Get the latest news, weather forecasts and sports stories delivered straight to your inbox! Sign up for our newsletters .

The law now requires companies to give those impacted 2 months of credit monitoring and access to a credit report. This only applies if the breach involved a person’s name and Social Security Number, bank account number, or driver’s license or state ID number.

The online portal along with resources about the law can be found on the Attorney General’s Office’s website .

For the latest news, weather, sports, and streaming video, head to WTAJ - www.wtaj.com.