State of Ohio Policies
Ohio Revised Code §1347
Ohio Revised Code §1347 (formerly referred to as House Bill 104) establishes requirements for notifying Ohio residents in the event that certain personal information is disclosed or reasonably believed to be disclosed to unauthorized persons through a system security breach. Personal information as defined in this law includes an individual's name coupled with his or her Social Security number, driver's license number and/or credit card information. Specific requirements vary depending on the size and certainty of the disclosure.
Ohio Senate Bill 126
Ohio Senate Bill 126 went into effect March 30, 2007. This legislation exempts persons, entities, state agencies and agencies of political subdivisions that are "covered entities" under the federal Health Insurance Portability and Accountability Act (HIPAA) from the disclosure requirement related to unauthorized access to personal information as required by Ohio Revised Code 1347.12.