HI SB2695

Expands the definition of "personal information" under Chapter 487N (data breach notification law) to include an "identifier" (name, username, phone number, or email) combined with one or more "specified data elements."

Adds eight categories of "specified data elements" including social security numbers, government ID numbers, financial account numbers, security codes, biometric data, private authentication keys, and health insurance policy numbers.

Excludes from "specified data element" any medical information protected by the Health Insurance Portability and Accountability Act of 1996 and other applicable federal or state law.

Adds licensees subject to the Insurance Data Security Law (Chapter 431, Article 3B) to the list of businesses deemed compliant with security breach notification requirements.

Effective date: July 1, 3000 (note: appears to contain a typographical error in the legislation).