Colorado’s new law requires notification of victims of breaches of personal information within 30 days. That’s a tougher requirement than the HIPAA breach notification rule. Efforts to enact a uniform federal data breach notification law, other than HIPAA, have been unsuccessful. The new Colorado law will have an impact on a broad range of organizations that handle healthcare information, including entities that are not physically located in the state, says privacy attorney David Holtzman, vice president of compliance at the security consultancy CynergisTek.”]
Source: https://www.govinfosecurity.com/colorados-tougher-breach-law-healthcare-incidents-included-a-11071