8 months ago

The Ohio state government enacted Senate Bill 220, commonly known as the Ohio Data Protection Act, in November 2018. The act was the first incentive-based law introduced in the United States to protect organizations that achieve a “higher level of cybersecurity.”

The Ohio Data Protection Act provides legal safe harbor to businesses that substantially comply with one of eight industry-recognized cybersecurity frameworks.

The Ohio Data Protection Act also protects organizations that meet https://www.upguard.com/blog/pci-compliance and other listed framework standards.

The Ohio Data Protection Act applies broadly to any Ohio business, organization, or collection of entities that process personal information or restricted information.