On June 28, 2024, Pennsylvania enacted significant changes to its existing Breach of Personal Information Notification Act, with the adoption of Pennsylvania Senate Bill 824 (Senate Bill 824). Senate Bill 824 marks the second amendment to the Pennsylvania data breach notification law in the last two years, following amendments which went into effect on May 2, 2023. These newest updates to the law, which will become enforceable on September 26, 2024, create several new legal obligations for organizations that maintain data related to residents of Pennsylvania, as well as changing certain legal thresholds and definitions which will impact entities subject to Pennsylvania law.