{"id":26903,"date":"2024-04-19T09:07:04","date_gmt":"2024-04-19T16:07:04","guid":{"rendered":"https:\/\/www.privateinternetaccess.com\/blog\/?p=26903"},"modified":"2024-04-19T09:07:06","modified_gmt":"2024-04-19T16:07:06","slug":"digital-privacy-michigan","status":"publish","type":"post","link":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/","title":{"rendered":"The State of Digital Privacy and Security in Michigan"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Some states are much worse than others when it comes to protecting your online privacy and security. We wanted to find out if Michigan is among the best or worst states to live in for your digital safety.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this article, we\u2019ll explore the current laws in place to protect your information, including loopholes and exclusions in Michigan state law. We\u2019ll also take a closer look at cybercrime in Michigan, focusing on known security breaches that have compromised the data of millions of locals in the past.<\/p>\n\n\n\n<div style=\"background-color: #cfe2f3; padding: 10px; border-radius: 25px;\">\n<p>Looking for a <a href=\"https:\/\/www.privateinternetaccess.com\/vpn-server\/usa-vpn\/michigan-vpn\">Michigan VPN<\/a>? You can download PIA to keep your data secure and increase your online privacy. We have <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/50-servers-50-states\/\">servers in all 50 states<\/a> and in 90+ other countries, too. Our VPN shields your data with powerful encryption, stopping outsiders from seeing what you\u2019re up to or stealing your details.<\/p>\n  \n <a style=\"text-decoration: none;\" href=\"https:\/\/www.privateinternetaccess.com\/buy-vpn-online?conversionpoint=digital_privacy_michigan%0A\"><button class=\"bg-btn-1\"> Get PIA VPN<\/button><\/a>\n\n  <\/div> <br>\n\n\n\n\n<div style=\"background-color: #d5dde3; padding: 15px; border-radius: 10px; width: 500px;\">\n<h4>Table of Contents<\/h4>\n<a href=\"#1\">How Does Michigan Protect Your Online Privacy and Security?\n<\/a><br>\n<a href=\"#2\">Digital Privacy and Security Concerns in Michigan<\/a><br>\n<a href=\"#3\">A Closer Look at Michigan Cybercrime\n<\/a><br>\n<a href=\"#4\">Boost Your Digital Privacy and Security in Michigan\n<\/a><br>\n<a href=\"#5\">Take Control of Your Online Privacy\n<\/a><br>\n<a href=\"#faq\">FAQ<\/a><br>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"1\"><strong>How Does Michigan Protect Your Online Privacy and Security?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Michigan doesn\u2019t use federal laws to inform its decision-making process. It\u2019s free to draft and introduce new state laws governing how your online privacy and security should be handled, and how companies can use your data.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">While states such as <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/best-and-worst-us-states-online-privacy\/\">California, Connecticut, and Virginia<\/a> have made considerable movements toward increasing their citizens\u2019 online privacy, Michigan isn\u2019t quite there yet. Michigan lawmakers submitted the Michigan Personal Data Privacy Act (MPDPA) bill in 2022, which would introduce strict laws around consent, data sharing and processing, and locals\u2019 rights to privacy. The bill has not yet passed at the time of publishing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Michigan does have some digital privacy and security laws in place, but they aren\u2019t as comprehensive as in some other US states. It also doesn\u2019t impose strict laws preventing surveillance, or restricting sites and platforms from collecting and using your data. This effectively means Michigan residents have little legal protection when they go online.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s explore which state laws Michigan implements to protect your digital freedom and privacy.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-internet-privacy-protection-act\"><strong>Internet Privacy Protection Act<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Michigan introduced the Internet Privacy Protection Act in 2012, alongside five other US states, to <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/how-to-protect-your-privacy-at-work\/\">protect the privacy of workers<\/a>, job applicants, and students. Previously, employers could request passwords for a job applicant\u2019s social media platforms to explore their account activity, including their Facebook, Twitter, and Gmail credentials. They could then refuse to hire a job applicant based on what they uncovered in their accounts. The same applies to educational institutions for prospective or current students, including schools, colleges, and universities.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"500\" src=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-5.png\" alt=\"\" class=\"wp-image-26905\" style=\"width:240px\" srcset=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-5.png 500w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-5-300x300.png 300w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-5-150x150.png 150w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">This act has exceptions, such as when the device has been paid for by the workplace or educational institution. They may also request access to your accounts if there\u2019s suspected misconduct or someone has potentially shared confidential information.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Alongside account logins, this act also limits websites and online services that gather personal information. Organizations must outline in their privacy policy which information they store, how it\u2019s used, and whether it\u2019s shared with any other third parties. That said, it doesn\u2019t prohibit them from gathering, using, or sharing any of your data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-identity-theft-protection-act-itpa\"><strong>Identity Theft Protection Act (ITPA)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The Identity Theft Protection Act is one of Michigan\u2019s earliest digital privacy and security laws, introduced in 2004. It provides rules around notifying Michigan citizens if their personal information has been involved in a data breach, or accessed by an unauthorized individual.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The act outlines that companies must notify Michigan residents of any data breaches that affect them without unreasonable delay, but it doesn\u2019t include a specific time frame. An organization must mention the type of breach, what it has done to mitigate it, and what kind of personal information was leaked.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In 2010, Governor Jennifer Granholm amended the ITPA to include a new clause that protects residents from phishing scams and other online fraud attempts. It\u2019s now illegal to gather personally identifiable information under false pretenses, whether or not this information will be used to commit a crime. This amendment includes protection against <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/phishing-smishing-vishing-what-you-need-to-know-how-to-protect-yourself\/\">phishing<\/a> websites, <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/protect-your-email\/\">emails<\/a>, and <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/what-is-malware-5-tips-for-malware-protection\/\">harmful software<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-children-s-online-privacy-protection-act-coppa\"><strong>Children\u2019s Online Privacy Protection Act (COPPA)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The Children\u2019s Online Privacy Protection Act (COPPA) is one of the only federal laws that has mandatory compliance across all US states. This act aims to <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/internet-safety-kids\/\">protect children\u2019s information<\/a> (under the age of 13), mandating that websites and online services must gain parental consent before they collect any personal information. They must also have clear procedures for maintaining the security and privacy of the information they use.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In addition to COPPA, Michigan implemented a Cyberbullying Prevention Law to limit online bullying via electronic devices or on digital platforms such as social media. People who commit these types of offenses can face jail time and fines of $500 or more.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Michigan schools must also have clear internet safety policies for how they protect children\u2019s information while using school-owned devices, such as tablets and computers.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-michigan-personal-data-privacy-act-mpdpa\"><strong>Michigan Personal Data Privacy Act (MPDPA)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The Michigan Personal Data Privacy Act (MPDPA) is the first step toward a comprehensive online privacy and data protection law. It was first introduced in late 2022, and modeled after the California Consumer Privacy Act (CCPA), but it hasn\u2019t been approved yet at the time of publishing.\u00a0<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"500\" src=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-1-2.png\" alt=\"\" class=\"wp-image-26907\" style=\"width:240px\" srcset=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-1-2.png 500w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-1-2-300x300.png 300w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-1-2-150x150.png 150w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">If introduced, the MPDPA would place heavy restrictions on <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/federal-trade-commission-warns-data-brokers-about-the-uncontrolled-sale-of-raw-location-data\/\">data brokers<\/a>, websites, advertisers, and any other businesses that collect, process, and store Michigan residents\u2019 sensitive personal information. This includes information such as social security numbers, financial information, names and addresses, and biometric data.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you live in the state, it would give you greater control over your data and how it\u2019s used, with more transparency around how businesses share consumer information, for what purpose, and for how long. This means organizations would also need to introduce clear data protection policies and security provisions for managing your data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The MPDPA mirrors some provisions of the EU\u2019s <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/gdpr-still-flawed-after-five-years\/\">General Data Protection Regulation<\/a> (GDPR), which means businesses can\u2019t process sensitive personal data without explicit consent through opt-in measures. They must give people the right to choose how their data is used. While promising, the Senate is still reviewing MPDPA (Bill 659) with no end date in sight, which raises concerns about the current reality of <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/what-is-data-privacy\/\">data privacy<\/a> for Michiganders.\u00a0<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"2\"><strong>Digital Privacy and Security Concerns in Michigan<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-consumer-data-protection\"><strong>Consumer Data Protection<\/strong><\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"500\" src=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-7.png\" alt=\"\" class=\"wp-image-26913\" style=\"width:240px\" srcset=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-7.png 500w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-7-300x300.png 300w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-7-150x150.png 150w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Michigan has introduced a new bill to better protect your data, but it\u2019s not in force yet. Without the MPDPA, your data is at risk. The ITPA makes sure you know about security breaches when they occur, but nothing stops your data from being involved in a leak in the first place. You have almost no control over how your data is collected, used, or shared with third parties. This lack of oversight and options to opt out increases the risk of your data being exposed to breaches.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Even if the MPDPA was introduced, it only protects sensitive personal data, such as your name, address, and biometric information. It doesn\u2019t protect data like your search history, browsing habits, and general location. This means companies may still be able to collect and use this information without your consent. They have to tell you how they use this information, but it doesn\u2019t stop them from doing so.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-delays-in-reporting-data-breaches\"><strong>Delays in Reporting Data Breaches<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The ITPA makes it clear organizations should report security breaches as soon as reasonably possible, but it doesn\u2019t set any timescale. This means a company could have leaked your data and potentially not tell you until months after it happened.\u00a0<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"500\" src=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-2-1.png\" alt=\"\" class=\"wp-image-26908\" style=\"width:240px\" srcset=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-2-1.png 500w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-2-1-300x300.png 300w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-2-1-150x150.png 150w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">In March 2023, for example, a healthcare provider experienced a phishing incident that led to cybercriminals accessing sensitive health data, including names, birth dates, lab results, medical record numbers, and private conversations between doctors and their patients. The provider didn\u2019t inform anyone of this data breach until May, two months after the incident occurred.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What\u2019s worse, the ITPA states notice is not required if the data breach is considered unlikely to cause substantial loss or injury, or result in identity theft. This is open to the interpretation of the company itself, so in some cases, breaches involving your information could occur without you ever knowing.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-no-additional-provisions-for-healthcare-data\"><strong>No Additional Provisions for Healthcare Data<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Healthcare companies fall under the ITPA in Michigan, but they\u2019re not governed by any additional legislation for reporting breaches. According to Trustwave SpiderLabs, 24% of all cyber attacks in the US in 2022 targeted the healthcare industry. For this reason, many states have implemented additional provisions for healthcare organizations, particularly around informing patients, notification to the state, and state investigation.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As an example, in Connecticut, healthcare organizations must notify patients of any breaches within 90 days. They must also inform the Department of Attorney General immediately so that appropriate action can be taken. In Michigan, no such requirements exist. This leaves residents\u2019 sensitive healthcare information at risk of exposure, with few repercussions for companies involved with data breaches.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-federal-surveillance\"><strong>Federal Surveillance<\/strong><\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"500\" src=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-3-1.png\" alt=\"\" class=\"wp-image-26909\" style=\"width:230px\" srcset=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-3-1.png 500w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-3-1-300x300.png 300w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-3-1-150x150.png 150w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Reports surfaced in 2021 of unknown software which allowed Michigan State Police to harvest data from residents. This included gathering data from social media accounts, Amazon, dating apps, the dark web, and other internet sites to help with their investigations and identify or profile individuals of interest.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In 2015, it was also revealed that the Michigan FBI had been using cell-site simulators (also known as <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/how-to-avoid-stingray-downgrade-attacks\/\">Stingrays<\/a>) to spy on residents\u2019 mobile phones without disclosing it to the public. According to reports, the FBI had been using this method to gather data for many years before the media became aware of it. This raises many questions about online privacy in Michigan, particularly if you\u2019re being monitored without your knowledge.<\/p>\n\n\n\n<div style=\"background-color: #cfe2f3; padding: 10px; border-radius: 25px;\">\n<p>To help combat online surveillance, you can<a href=\"https:\/\/www.privateinternetaccess.com\/buy-vpn-online?conversionpoint=digital_privacy_michigan\"> use PIA VPN<\/a>. Our VPN uses <a href=\"https:\/\/www.privateinternetaccess.com\/vpn-features\/vpn-encryption\">powerful encryption<\/a> to mask your online activity, so outsiders can\u2019t see what you\u2019re doing \u2013 including your ISP. This helps to prevent any third party from tracking your online habits by monitoring which websites you\u2019re visiting so they can digitally profile you.<\/p>\n\n  <\/div> <br>\n\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Workplace Surveillance<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Workplace surveillance is commonplace in Michigan. Although employers can no longer request passwords to view your social media accounts, they can still monitor activities within the workplace. This is standard in many countries and states, allowing employers to see what employees do on their devices, including their search history, visited websites, messages, and email content.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Employers also often install firewalls to restrict access to certain platforms and websites, such as social media and streaming sites. Some workplaces may have disciplinary measures in place if employees try to access restricted websites. This is why some employees like to use VPNs to protect their privacy and <a href=\"https:\/\/www.privateinternetaccess.com\/unblock-websites-vpn\">unblock websites<\/a> at work. It\u2019s also useful when <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/work-from-home-privacy\/\">working remotely<\/a>. A VPN encrypts your connection to keep your sensitive workplace communications concealed. You can <a href=\"https:\/\/www.privateinternetaccess.com\/buy-vpn-online?conversionpoint=digital_privacy_michigan\">try PIA VPN<\/a> and connect to one of our secure servers in Michigan to boost your workplace privacy.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<a style=\"text-decoration: none;\" href=\"https:\/\/www.privateinternetaccess.com\/buy-vpn-online?conversionpoint=digital_privacy_michigan%0A\"><button class=\"bg-btn-1\"> Get PIA VPN<\/button><\/a>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"3\"><strong>A Closer Look at Michigan Cybercrime\u00a0<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cybercrime in Michigan is increasing. Over the last few years, Michigan has consistently been ranked by the FBI as one of the top 10 states for monetary losses caused by online fraud and the number of victims of cybercrime. In 2022, Michigan ranked 3rd, with 13,566 victims. This is an increase from around 11,000 victims in 2021.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In total, victims of cybercrime in Michigan lost over $177 million in 2022, with the five most common attacks being phishing, data breaches, non-payment\/non-delivery, extortion, and tech support. Identity theft, credit card fraud, ransomware, and direct data breaches are also common. In fact, Michigan has made headlines several times in recent years for large and costly data breaches affecting its residents, especially within healthcare. Let\u2019s take a quick look at some of the most recent breaches in the state.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Welltok Healthcare Data Breach<\/strong><\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"500\" src=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-4-1.png\" alt=\"\" class=\"wp-image-26910\" style=\"width:240px\" srcset=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-4-1.png 500w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-4-1-300x300.png 300w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-4-1-150x150.png 150w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">The November 2023 Welltok breach reportedly compromised the data of over 1 million Michiganders. Welltok is a software company that provides communication services for Corewell Health and Priority Health, two well-known healthcare giants. In the breach, a cybercriminal managed to exploit a vulnerability in their system, known as the MOVEit Transfer server. This server was responsible for securely <a href=\"https:\/\/www.privateinternetaccess.com\/blog\/how-massive-server-to-server-data-transfers-threaten-privacy\/\">transferring sensitive information<\/a> about patients.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The breach compromised various types of sensitive personal data, including names, addresses, health insurance numbers, phone numbers, and medical records. Although Welltok did inform affected individuals of the security breach, it wasn\u2019t reported until two months later when the company reviewed its internal systems. During the two months, cybercriminals had full access to all the patient data on the MOVEit Transfer server.\u00a0\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>HealthEC Data Breach<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">While dealing with the aftermath of the Welltok breach, Michigan residents were informed of another healthcare cybersecurity incident just a month later, in December 2023. This time, HealthEC, a vendor supplying health management software, fell victim to cybercriminals\u2019 tactics.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cybercriminals identified a vulnerability in their systems, allowing unauthorized access to servers storing patient data. This included sensitive data such as social security numbers, medical records, and interactions between patients and healthcare professionals. The breach exposed almost 4.5 million records affecting over 1 million patients.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A statement published by HealthEC explains the breach came to light in July 2023, when cybercriminals began copying files. HealthEC began to inform their clients in October 2023, and patients were informed in December.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>McLaren Healthcare Data Breach<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In September 2023, McLaren Healthcare temporarily shut down the computer networks at 14 Michigan healthcare facilities after they detected suspicious and unauthorized activity on their servers. Reports suggest the breach exposed approximately 2.2 million patient records containing sensitive personal data, from names and addresses to health insurance numbers and billing details.\u00a0<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"500\" src=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-5-1.png\" alt=\"\" class=\"wp-image-26911\" style=\"width:240px\" srcset=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-5-1.png 500w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-5-1-300x300.png 300w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-5-1-150x150.png 150w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">McLaren Healthcare claimed the breach occurred between July and August 2023. In October 2023, a cybercriminal ransomware group named ALPHV\/BlackCat publicly admitted to committing the data breach. The group suggested they had stolen around 6 terabytes of patient data. They said this information related to 2.5 million patients and threatened to sell the data on the dark web.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Patients were informed of the ransomware attack in November 2023, though McLaren Healthcare didn\u2019t specify exactly which data was compromised or which systems the breach affected.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>University of Michigan<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The University of Michigan fell victim to a cyber attack in August 2023. The University discovered unauthorized access to its systems, forcing it to shut them down and move students offline. Cybercriminals were able to access confidential student information stored on the campus\u2019s servers, such as driver\u2019s license numbers, social security numbers, and financial information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The breach was reported to have affected around 63,000 people in total, including students, applicants, and employees. After discovering the breach, Michigan University hired external cybersecurity professionals to help contain it and minimize the impact on individuals. It then began to inform people who had been affected in October, two months after it occurred.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"4\"><strong>Boost Your Digital Privacy and Security in Michigan\u00a0<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Michigan doesn\u2019t have any comprehensive laws in place to protect your digital privacy. Websites, advertisers, and other third parties are free to monitor and gather your information without your consent and share it however they please. Your data could end up anywhere without you knowing, including on the dark web.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Phishing scams and ransomware attacks are common in Michigan. Even your most private and sensitive information isn\u2019t safe. Healthcare attacks are growing throughout the US, but Michigan has experienced more than most states in the last year alone.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"500\" src=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-6.png\" alt=\"\" class=\"wp-image-26912\" style=\"width:240px\" srcset=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-6.png 500w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-6-300x300.png 300w, https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/04\/pasted-image-0-6-150x150.png 150w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">To help strengthen your digital security and privacy, consider downloading a VPN. <a href=\"https:\/\/www.privateinternetaccess.com\/buy-vpn-online?conversionpoint=digital_privacy_michigan\">PIA<\/a> protects your traffic using some of the strongest encryption methods available today, moving your data through a secure VPN tunnel. If a cybercriminal manages to exploit a security loophole in a network, they still can\u2019t see what you\u2019re doing on the network if you use a VPN, because they can\u2019t get through the encrypted tunnel. It <a href=\"https:\/\/www.privateinternetaccess.com\/stay-anonymous-online\">sh<\/a><a href=\"https:\/\/www.privateinternetaccess.com\/stay-anonymous-online\">i<\/a><a href=\"https:\/\/www.privateinternetaccess.com\/stay-anonymous-online\">elds your activity<\/a> from anyone on the network, stopping outsiders from snooping on your information, including your online searches and private communications.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">PIA VPN also <a href=\"https:\/\/www.privateinternetaccess.com\/hide-my-ip-address\">swaps your IP address<\/a> with another from one of our worldwide network of VPN servers, including fast 10-Gbps servers in Michigan. Any on-site trackers and cookies logging your information can only link it back to the VPN server\u2019s IP address, not your real one. This limits how much information third parties have about you because they can\u2019t link activity back to your real IP address. That\u2019s especially important in Michigan, where third parties can collect just about any data they like without telling you.\u00a0<\/p>\n\n\n\n<div style=\"background-color: #cfe2f3; padding: 10px; border-radius: 25px;\">\n<p><strong>Be aware: <\/strong>A VPN can\u2019t stop websites from tracking you if you\u2019re logged into your account while connected. Sites like Facebook and Google will see that you\u2019re using a different IP address, but they still know it\u2019s you if you\u2019re logged in. Anything you do online can be tracked to your profile. If you want to boost your privacy further, try using different names and email addresses for some accounts to minimize profiling.<\/p><\/div> <br>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"5\"><strong>Take Control of Your Online Privacy<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Michigan\u2019s MPDPA will give you much greater control over your information and who has access to it, but the bill hasn\u2019t yet passed. Third parties can track your every online move, and they don\u2019t even need to ask your permission. If a data breach leaks your information, local laws only dictate they tell you without unreasonable delay. It\u2019s up to the company to decide how to interpret that.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So what can you do? The best thing you can do is take matters into your own hands. You can boost your online privacy with PIA VPN by encrypting your online traffic and limiting the amount of data third parties can gather from you. It won\u2019t make you invisible, but it will help protect your privacy and make your devices more secure. If you\u2019re ready to bolster your online protection, you can<a href=\"https:\/\/www.privateinternetaccess.com\/buy-vpn-online?conversionpoint=digital_privacy_michigan\"> try PIA<\/a> risk-free with a 30-day money-back guarantee.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<a style=\"text-decoration: none;\" href=\"https:\/\/www.privateinternetaccess.com\/buy-vpn-online?conversionpoint=digital_privacy_michigan%0A\"><button class=\"bg-btn-1\"> Get PIA VPN<\/button><\/a>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"faq\"><strong>FAQ<\/strong><\/h2>\n\n\n\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-1713332704412\"><h3 class=\"schema-faq-question\"><strong>Which US states have the strictest privacy laws?<\/strong><\/h3> <p class=\"schema-faq-answer\">Some of the US states with the strictest privacy laws include California, Colorado, Connecticut, and Utah. California is well-known for its comprehensive California Consumer Privacy Act (CCPA), which gives residents greater control over their digital information. It mandates that websites and third parties must gain consent before tracking information, give users the right to opt out of data processing, and provide clear privacy policies that outline how data is used, stored, and shared.\u00a0<br><br><\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1713332713931\"><h3 class=\"schema-faq-question\"><strong>Does Michigan have privacy laws?<\/strong><\/h3> <p class=\"schema-faq-answer\">Michigan has some online privacy laws in place, including the Internet Privacy Protection Act and the Identity Theft Protection Act (ITPA). The Internet Privacy Protection Act stops employers and schools from requesting passwords to look through individuals\u2019 online accounts. It also ensures websites lay out clear privacy policies about how they use your data. The ITPA requires companies to notify their customers of data breaches without unreasonable delay.\u00a0<br><br><\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1713332722602\"><h3 class=\"schema-faq-question\"><strong>What is the data protection law in Michigan?<\/strong><\/h3> <p class=\"schema-faq-answer\">Michigan doesn\u2019t have any comprehensive laws in place to protect residents\u2019 data security and privacy. It has the Internet Privacy Protection Act and the Identity Theft Protection Act to enforce notifications about breaches and stop workplaces or schools from accessing passwords to monitor personal accounts. The Michigan Personal Data Privacy Act (MPDPA) was introduced in 2022, but hasn\u2019t been passed by the state. This would provide more rules around consent for data collection, as well as how data is used and shared.<br><br><\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1713332731750\"><h3 class=\"schema-faq-question\"><strong>What is the Michigan Personal Data Privacy Act (MPDPA)?<\/strong><\/h3> <p class=\"schema-faq-answer\">The Michigan Personal Data Privacy Act (MPDPA) is a proposed bill, first introduced in 2022. It places strict controls on data brokers, websites, advertisers, and other third parties that collect and store sensitive personal information. The MPDPA requires consent for data collection and processing, and gives users greater control over how their sensitive personal data is used, including a right to opt out.<\/p> <\/div> <\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Does Michigan law help keep your data secure? Learn about current digital privacy laws and how effective they are to see how safe you are online in Michigan. <\/p>\n","protected":false},"author":98,"featured_media":26094,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_stopmodifiedupdate":false,"_modified_date":"","footnotes":""},"categories":[1792],"tags":[],"class_list":["post-26903","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy-news-online"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.9 (Yoast SEO v26.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>The State of Digital Privacy and Security in Michigan<\/title>\n<meta name=\"description\" content=\"Does Michigan law help keep your data secure? Learn about current digital privacy laws and how effective they are to see how safe you are online in Michigan.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The State of Digital Privacy and Security in Michigan\" \/>\n<meta property=\"og:description\" content=\"Does Michigan law help keep your data secure? Learn about current digital privacy laws and how effective they are to see how safe you are online in Michigan.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/\" \/>\n<meta property=\"og:site_name\" content=\"PIA\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/privateinternetaccess\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-19T16:07:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-19T16:07:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/01\/pasted-image-0-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Elly Hancock\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@buyvpnservice\" \/>\n<meta name=\"twitter:site\" content=\"@buyvpnservice\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Elly Hancock\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"17 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/\"},\"author\":{\"name\":\"Elly Hancock\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/3c1c417f4782b600261cf8249e9fc797\"},\"headline\":\"The State of Digital Privacy and Security in Michigan\",\"datePublished\":\"2024-04-19T16:07:04+00:00\",\"dateModified\":\"2024-04-19T16:07:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/\"},\"wordCount\":3324,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/01\/pasted-image-0-1.png\",\"articleSection\":[\"Privacy News Online\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#respond\"]}]},{\"@type\":[\"WebPage\",\"FAQPage\"],\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/\",\"name\":\"The State of Digital Privacy and Security in Michigan\",\"isPartOf\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/01\/pasted-image-0-1.png\",\"datePublished\":\"2024-04-19T16:07:04+00:00\",\"dateModified\":\"2024-04-19T16:07:06+00:00\",\"description\":\"Does Michigan law help keep your data secure? Learn about current digital privacy laws and how effective they are to see how safe you are online in Michigan.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#breadcrumb\"},\"mainEntity\":[{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332704412\"},{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332713931\"},{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332722602\"},{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332731750\"}],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#primaryimage\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/01\/pasted-image-0-1.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/01\/pasted-image-0-1.png\",\"width\":1200,\"height\":800},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.privateinternetaccess.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The State of Digital Privacy and Security in Michigan\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#website\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"name\":\"PIA\",\"description\":\"Online privacy news from around the world.\",\"publisher\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#organization\",\"name\":\"Private Internet Access\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png\",\"width\":1200,\"height\":1200,\"caption\":\"Private Internet Access\"},\"image\":{\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/privateinternetaccess\/\",\"https:\/\/x.com\/buyvpnservice\",\"https:\/\/www.instagram.com\/piavpn\/\",\"https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/3c1c417f4782b600261cf8249e9fc797\",\"name\":\"Elly Hancock\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/05\/cropped-eff24dca559303c3f3517a0dcbb9a4c0.jpeg\",\"contentUrl\":\"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/05\/cropped-eff24dca559303c3f3517a0dcbb9a4c0.jpeg\",\"caption\":\"Elly Hancock\"},\"description\":\"Elly is an experienced digital technology writer based in the UK. When she's not researching and writing about cyber security, you can find Elly on long dog walks, cooking a new recipe, or in the gym.\",\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/author\/elly-hancock\/\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332704412\",\"position\":1,\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332704412\",\"name\":\"Which US states have the strictest privacy laws?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Some of the US states with the strictest privacy laws include California, Colorado, Connecticut, and Utah. California is well-known for its comprehensive California Consumer Privacy Act (CCPA), which gives residents greater control over their digital information. It mandates that websites and third parties must gain consent before tracking information, give users the right to opt out of data processing, and provide clear privacy policies that outline how data is used, stored, and shared.\u00a0<br\/><br\/>\",\"inLanguage\":\"en-US\"},\"inLanguage\":\"en-US\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332713931\",\"position\":2,\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332713931\",\"name\":\"Does Michigan have privacy laws?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Michigan has some online privacy laws in place, including the Internet Privacy Protection Act and the Identity Theft Protection Act (ITPA). The Internet Privacy Protection Act stops employers and schools from requesting passwords to look through individuals' online accounts. It also ensures websites lay out clear privacy policies about how they use your data. The ITPA requires companies to notify their customers of data breaches without unreasonable delay.\u00a0<br\/><br\/>\",\"inLanguage\":\"en-US\"},\"inLanguage\":\"en-US\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332722602\",\"position\":3,\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332722602\",\"name\":\"What is the data protection law in Michigan?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Michigan doesn\u2019t have any comprehensive laws in place to protect residents\u2019 data security and privacy. It has the Internet Privacy Protection Act and the Identity Theft Protection Act to enforce notifications about breaches and stop workplaces or schools from accessing passwords to monitor personal accounts. The Michigan Personal Data Privacy Act (MPDPA) was introduced in 2022, but hasn\u2019t been passed by the state. This would provide more rules around consent for data collection, as well as how data is used and shared.<br\/><br\/>\",\"inLanguage\":\"en-US\"},\"inLanguage\":\"en-US\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332731750\",\"position\":4,\"url\":\"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332731750\",\"name\":\"What is the Michigan Personal Data Privacy Act (MPDPA)?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The Michigan Personal Data Privacy Act (MPDPA) is a proposed bill, first introduced in 2022. It places strict controls on data brokers, websites, advertisers, and other third parties that collect and store sensitive personal information. The MPDPA requires consent for data collection and processing, and gives users greater control over how their sensitive personal data is used, including a right to opt out.\",\"inLanguage\":\"en-US\"},\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"The State of Digital Privacy and Security in Michigan","description":"Does Michigan law help keep your data secure? Learn about current digital privacy laws and how effective they are to see how safe you are online in Michigan.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/","og_locale":"en_US","og_type":"article","og_title":"The State of Digital Privacy and Security in Michigan","og_description":"Does Michigan law help keep your data secure? Learn about current digital privacy laws and how effective they are to see how safe you are online in Michigan.","og_url":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/","og_site_name":"PIA","article_publisher":"https:\/\/www.facebook.com\/privateinternetaccess\/","article_published_time":"2024-04-19T16:07:04+00:00","article_modified_time":"2024-04-19T16:07:06+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/01\/pasted-image-0-1.png","type":"image\/png"}],"author":"Elly Hancock","twitter_card":"summary_large_image","twitter_creator":"@buyvpnservice","twitter_site":"@buyvpnservice","twitter_misc":{"Written by":"Elly Hancock","Est. reading time":"17 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#article","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/"},"author":{"name":"Elly Hancock","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/3c1c417f4782b600261cf8249e9fc797"},"headline":"The State of Digital Privacy and Security in Michigan","datePublished":"2024-04-19T16:07:04+00:00","dateModified":"2024-04-19T16:07:06+00:00","mainEntityOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/"},"wordCount":3324,"commentCount":0,"publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/01\/pasted-image-0-1.png","articleSection":["Privacy News Online"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#respond"]}]},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/","name":"The State of Digital Privacy and Security in Michigan","isPartOf":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#primaryimage"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#primaryimage"},"thumbnailUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/01\/pasted-image-0-1.png","datePublished":"2024-04-19T16:07:04+00:00","dateModified":"2024-04-19T16:07:06+00:00","description":"Does Michigan law help keep your data secure? Learn about current digital privacy laws and how effective they are to see how safe you are online in Michigan.","breadcrumb":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#breadcrumb"},"mainEntity":[{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332704412"},{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332713931"},{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332722602"},{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332731750"}],"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#primaryimage","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/01\/pasted-image-0-1.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/01\/pasted-image-0-1.png","width":1200,"height":800},{"@type":"BreadcrumbList","@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.privateinternetaccess.com\/blog\/"},{"@type":"ListItem","position":2,"name":"The State of Digital Privacy and Security in Michigan"}]},{"@type":"WebSite","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#website","url":"https:\/\/www.privateinternetaccess.com\/blog\/","name":"PIA","description":"Online privacy news from around the world.","publisher":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.privateinternetaccess.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#organization","name":"Private Internet Access","url":"https:\/\/www.privateinternetaccess.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2018\/07\/pialogowhitekglogo.png","width":1200,"height":1200,"caption":"Private Internet Access"},"image":{"@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/privateinternetaccess\/","https:\/\/x.com\/buyvpnservice","https:\/\/www.instagram.com\/piavpn\/","https:\/\/www.youtube.com\/channel\/UClyJZ47Rizb1xnwuKXDI0_w"]},{"@type":"Person","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/3c1c417f4782b600261cf8249e9fc797","name":"Elly Hancock","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privateinternetaccess.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/05\/cropped-eff24dca559303c3f3517a0dcbb9a4c0.jpeg","contentUrl":"https:\/\/www.privateinternetaccess.com\/blog\/wp-content\/uploads\/2024\/05\/cropped-eff24dca559303c3f3517a0dcbb9a4c0.jpeg","caption":"Elly Hancock"},"description":"Elly is an experienced digital technology writer based in the UK. When she's not researching and writing about cyber security, you can find Elly on long dog walks, cooking a new recipe, or in the gym.","url":"https:\/\/www.privateinternetaccess.com\/blog\/author\/elly-hancock\/"},{"@type":"Question","@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332704412","position":1,"url":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332704412","name":"Which US states have the strictest privacy laws?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Some of the US states with the strictest privacy laws include California, Colorado, Connecticut, and Utah. California is well-known for its comprehensive California Consumer Privacy Act (CCPA), which gives residents greater control over their digital information. It mandates that websites and third parties must gain consent before tracking information, give users the right to opt out of data processing, and provide clear privacy policies that outline how data is used, stored, and shared.\u00a0<br\/><br\/>","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332713931","position":2,"url":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332713931","name":"Does Michigan have privacy laws?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Michigan has some online privacy laws in place, including the Internet Privacy Protection Act and the Identity Theft Protection Act (ITPA). The Internet Privacy Protection Act stops employers and schools from requesting passwords to look through individuals' online accounts. It also ensures websites lay out clear privacy policies about how they use your data. The ITPA requires companies to notify their customers of data breaches without unreasonable delay.\u00a0<br\/><br\/>","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332722602","position":3,"url":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332722602","name":"What is the data protection law in Michigan?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Michigan doesn\u2019t have any comprehensive laws in place to protect residents\u2019 data security and privacy. It has the Internet Privacy Protection Act and the Identity Theft Protection Act to enforce notifications about breaches and stop workplaces or schools from accessing passwords to monitor personal accounts. The Michigan Personal Data Privacy Act (MPDPA) was introduced in 2022, but hasn\u2019t been passed by the state. This would provide more rules around consent for data collection, as well as how data is used and shared.<br\/><br\/>","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332731750","position":4,"url":"https:\/\/www.privateinternetaccess.com\/blog\/digital-privacy-michigan\/#faq-question-1713332731750","name":"What is the Michigan Personal Data Privacy Act (MPDPA)?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"The Michigan Personal Data Privacy Act (MPDPA) is a proposed bill, first introduced in 2022. It places strict controls on data brokers, websites, advertisers, and other third parties that collect and store sensitive personal information. The MPDPA requires consent for data collection and processing, and gives users greater control over how their sensitive personal data is used, including a right to opt out.","inLanguage":"en-US"},"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/26903","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/users\/98"}],"replies":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/comments?post=26903"}],"version-history":[{"count":6,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/26903\/revisions"}],"predecessor-version":[{"id":26921,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/posts\/26903\/revisions\/26921"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media\/26094"}],"wp:attachment":[{"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/media?parent=26903"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/categories?post=26903"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.privateinternetaccess.com\/blog\/wp-json\/wp\/v2\/tags?post=26903"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}