Ohio Cybersecurity Safe Harbor Law Takes Effect Nov. 2

From OMA Connections Partner Calfee: “Ohio recently enacted legislation providing a “safe harbor” in the form of an affirmative defense against causes of action in tort that allege that an entity failed to implement reasonable information security controls, resulting in a data breach concerning personal information or restricted information (the unauthorized disclosure of which is likely to result in a material risk of identity theft or other fraud). …

“The … additions to Ohio law may help many businesses to shield themselves from liability for cybersecurity breach incidents.”