New Washington State Data Security Law Effective July 1, 2010; Companies Should Assess Compliance With Several New State Data Security Laws


A new Washington state law, effective on July 1, 2010,1 will give financial institutions a cause of action against certain entities involved in payment card transactions that fail to take reasonable care to guard against unauthorized access to payment card information, where that failure is found to be the proximate cause of a data security breach.

The Washington statute is the third state law to incorporate all or a portion of the Payment Card Industry Data Security Standard (PCI DSS), the industry data security standard for the protection of credit card numbers and other payment card information.2 Minnesota’s 2007 Plastic Card Security Act adopted portions of the PCI DSS, and Nevada statutory amendments effective on January 1, 2010, required companies doing business in Nevada that accept credit card payments to comply with the PCI DSS in its entirety.

These state laws are part of a trend toward greater specificity, and more substantial burdens for businesses, in state data security laws.

Please see full alert below for more information.

LOADING PDF: If there are any problems, click here to download the file.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Wilson Sonsini Goodrich & Rosati | Attorney Advertising

Written by:


Wilson Sonsini Goodrich & Rosati on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.