As an increasing number of states expand their breach notification laws to include user credentials, companies should review their policies surrounding password creation and storage. In this Law360 article, Jason Wool discusses these laws as well as issues companies should consider when reviewing their password practices. This article is paywalled.
