The Ohio state government enacted Senate Bill 220, commonly known as the Ohio Data Protection Act, in November 2018. The act was the first incentive-based law introduced in the United States to protect organizations that achieve a “higher level of cybersecurity.”

The Ohio Data Protection Act provides legal safe harbor to businesses that substantially comply with one of eight industry-recognized cybersecurity frameworks.

The Ohio Data Protection Act also protects organizations that meet https://www.upguard.com/blog/pci-compliance and other listed framework standards.

The Ohio Data Protection Act applies broadly to any Ohio business, organization, or collection of entities that process personal information or restricted information.

Related Articles