On Aug. 3, 2018, Gov. John Kasich signed Senate Bill 220, also known as the Ohio Data Protection Act. Under the Act, eligible organizations may rely on their conformance to certain cybersecurity frameworks as an affirmative defense against tort claims in data breach litigation. The Act is intended to provide organizations with a legal incentive to implement written cybersecurity programs.
In order to qualify for this new defense, the organization must implement a written cybersecurity program…
via Columbus Business News – Local Columbus News | Business First of Columbus
New Ohio law incentivizes businesses that comply with cybersecurity programs