Sec. 301. Designation of data privacy officer and data security officer
118 words·~1 min read·
/bill/117/s/2499/is/section-301A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
A covered entity shall designate— 1 or more qualified employees or contractors as a data privacy officer; and 1 or more qualified employees or contractors (in addition to any employee or contractor designated under paragraph (1)) as a data security officer. An employee or contractor who is designated by a covered entity as a data privacy officer or a data security officer shall be responsible for, at a minimum, coordinating the covered entity's policies and practices regarding— in the case of a data privacy officer, compliance with the privacy requirements with respect to covered data under this Act; and in the case of a data security officer, the security requirements with respect to covered data under this Act.