Earlier this week, Mintz Levin's Privacy & Security Matters blog posted an update that Alabama has become the 50th state to enact a data breach notification law.

Although HIPAA is often a key focus, healthcare organizations must not lose sight of the various state reporting requirements applicable to their business.  For those healthcare organizations that store data about Alabama residents, take a look  here for some key provisions of the newly minted "Alabama Data Breach Notification Act of 2018," such as scope, notice requirements, and potential penalties.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.