FOR IMMEDIATE RELEASE
March 20, 2008
CONTACT: Erik Arneson
earneson@pasen.gov
717-787-4712
Back

Adjust Text Size

Senator Pileggi: State Should Report Personal
Information Breaches Within One Week

State agencies would be required to report data breaches involving personal information within one week under legislation being introduced by Senate Majority Leader Dominic Pileggi (R-9). 

"Three separate thefts of state-owned computers containing personal information were reported in the last half of 2007," said Sen. Pileggi. "Those computers included at least 17,800 Social Security numbers. Identity theft is a widespread concern, and citizens rightly expect the government to do everything possible to protect their sensitive personal information." 

In two cases, both involving the Department of Public Welfare, the public was not notified until three weeks after the thefts. In the third case, the Department of Aging took two weeks to notify the public. 

The reported thefts took place August 22, November 13, and December 5. In the first two incidents, computers containing the personal information of about 375,000 individuals were stolen from Department of Public Welfare offices in Harrisburg and Philadelphia. In the third incident, a laptop computer issued to a Department of Aging employee was stolen from a private residence. That computer contained the personal information of more than 20,000 individuals. 

Act 94 of 2005 requires such notice to be made "without unreasonable delay." Sen. Pileggi said, "Unfortunately, state agencies are taking too long to notify people whose personal information has been compromised. Three weeks is an unreasonable delay." 

Sen. Pileggi's legislation, developed with the Attorney General's office, would require that breaches be reported to the Attorney General within three business days. It would also authorize the Attorney General to investigate every breach involving state agencies. 

More information about state issues can be found on Sen. Pileggi's web site, www.senatorpileggi.com.