Alabama Data Breach Notification Act

The Act requires all businesses that acquire or use sensitive personally identifiable information (“SPII”) to “implement and maintain reasonable security measures to protect” SPII against security breaches. SPII is nonpublic information about...

The LabMD Case and the Evolving Concept of “Reasonable Security”

LabMD, Inc. was a cancer diagnostic testing facility that used medical specimen samples and patient information to provide diagnostic information to health care providers. The company was subject to the Health Insurance Portability and Accountability Act of 1996...