Thanks to infosec expert (and Indiana resident) Chris Soghoian, and a receptive state legislator who listened to an informed constituent, Indiana now has a much improved breach notification law , closing a loophole we discussed previously.

We've written about expert involvement in crafting improved state laws before, most recently here.

BTW, the loophole Indiana has fixed still has a tenacious grasp on the press. As folks on the Dataloss Mailing List know all too well, nary a week goes by without a reported dutifully and unquestioningly stating that "risk is said to be small, since the stolen laptop was protected by a password". More on this in a future post.