Sec. 202. Privacy and data security officers; comprehensive privacy and data security programs; risk assessments and compliance
118 words·~1 min read·
/bill/116/s/2968/is/section-202A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
A covered entity shall designate— 1 or more qualified employees as privacy officers; and 1 or more qualified employees (in addition to any employee designated under paragraph (1)) as data security officers. An employee who is designated by a covered entity as a privacy officer or a data security officer shall be responsible for, at a minimum— implementing a comprehensive written data privacy program and data security program to safeguard the privacy and security of covered data throughout the life cycle of development and operational practices of the covered entity’s products or services; annually conducting privacy and data security risk assessments, data hygiene, and other quality control practices; and facilitating the covered entity’s ongoing compliance with this Act.