2021 Developments in State Cybersecurity Safe Harbor Laws

Only four months in and 2021 has already been a big year for state cybersecurity safe harbor legislation.  Two states, Utah and Connecticut, have recently enacted or introduced a breach litigation safe harbor to incentivize businesses to protect personal information by adopting industry-recognized cybersecurity frameworks such as the National Institute of Standards and Technology’s (NIST) Cybersecurity Framework and the Center for Internet Security’s (CIS) Critical Security Controls.