Effective July 1, 2017, a new Virginia law requires employers and payroll service providers to notify the Office of the Attorney General “without unreasonable delay” after discovery of a breach of computerized employee payroll data that compromises the confidentiality of the data.
This obligation applies regardless of whether the breach triggers other database breach notification requirements. The law requires the notice to provide the affected employer’s name and federal employer identification number. Upon receipt of the notice, the Office of the Attorney General is required to notify the Department of Taxation of the breach
