Careers

Diversity

With 17 offices, from New York to Los Angeles and Seattle to Orlando, we live and work in communities all over the U.S., collaborating across locations, disciplines and even borders. Our experienced, highly ranked lawyers serve businesses wherever they are and wherever they want to go.

Offices

About Us

Pages

Professionals

Thought leadership: blogs, podcasts, videos, publications, events and news

Insights

Services

Pro Bono

Am Law 100 firm with practices in Business, Digital Assets and Data Management, Intellectual Property, Labor & Employment, Litigation and Tax.

Home | BakerHostetler

Casie Collignon, Aleksandra Vold Moderate Panels at NetDiligence Cyber Risk Summit

Teresa Goody Guillén Presents at SPAC Conference 2024

James Sherer Takes Part in Webinar for Red Clover Advisors

Lynn Sessions Takes Part in State of Cyber Defense Webinar

Consistent with recent trends in broadening the scope of state data breach notification statutes, Connecticut and Florida have expanded the definitions of personal information under their respective data breach notification statutes to include geolocation data. This change became effective in Connecticut as of Oct. 1 and will become effective in Florida on July 1, 2024.

core/paragraph

1. Connecticut’s Data Breach Notification Law Changes

core/heading

Connecticut updated its data breach notification statute (Conn. Gen. Stat. § 36a-701b) to expand the definition of “personal information” to now include “precise geolocation data.”

core/list-item

“Precise geolocation data” means “information derived from technology, including, but not limited to, global positioning system [GPS] level latitude and longitude coordinates or other mechanisms, that directly identifies the specific location of an individual with precision and accuracy within a radius of [1,750] feet.”

core/list

2. Florida’s Data Breach Notification Law Changes

Florida’s Digital Bill of Rights (SB 262) amends the definition of “personal information” in Florida’s breach notification statute (Fla. Stat. § 501.171) to now include “an individual’s biometric data” and “any information regarding an individual’s geolocation.”

Notably, unlike with Connecticut, this addition does not come with corresponding definitions, leaving some ambiguity in interpretation.

As more states update their breach notification laws to include elements like geolocation data, an opportunity is presented for organizations to review response plans and consider risk mitigation measures such as effective data retention schedules.

Florida and Connecticut Expand Breach Laws to Include Geolocation Data as Personal Information

Featured Insights

Related Services

Featured Insights