OH HB507

Amends section 1354.01 of the Revised Code to extend legal safe harbor to political subdivisions that implement a specified cybersecurity program

Expands the definition of "covered entity" to include political subdivisions in addition to businesses for purposes of data breach notification and cybersecurity protections

Defines "political subdivision" as municipal corporations, townships, counties, park districts, conservancy districts, sanitary districts, sewer districts, special water districts, or other governmental bodies responsible for activities in geographic areas smaller than the state

Maintains existing definitions of "data breach," "personal information," and "restricted information" with requirements that data be unencrypted, unredacted, and unaltered to be considered a breach

Repeals the existing section 1354.01 in its entirety and replaces it with the amended version