Ohio Rev. Code » Chapter 1354 - Ohio Revised Code | Ohio Laws
Ohio Revised Code

Ohio Rev. Code § 1354.01 (2026)

Definitions

✓ current as of May 2026
Find cases: SyfertCases citing this section ORCcodes.ohio.gov (official) Justiaon Justia CornellLII Search CasesGoogle Scholar
Effective:
April 5, 2019
Latest Legislation:
House Bill 66 - 132nd General Assembly
PDF:
Download Authenticated PDF
 

As used in this chapter:

(A) "Business" means any limited liability company, limited liability partnership, corporation, sole proprietorship, association, state institution of higher education as defined in section 3345.011 of the Revised Code, private college as defined in section 3365.01 of the Revised Code, or other group, however organized and whether operating for profit or not for profit, including a financial institution organized, chartered, or holding a license authorizing operation under the laws of this state, any other state, the United States, or any other country, or the parent or subsidiary of any of the foregoing.

(B) "Covered entity" means a business that accesses, maintains, communicates, or processes personal information or restricted information in or through one or more systems, networks, or services located in or outside this state.

(C) "Data breach" means unauthorized access to and acquisition of computerized data that compromises the security or confidentiality of personal information or restricted information owned by or licensed to a covered entity and that causes, reasonably is believed to have caused, or reasonably is believed will cause a material risk of identity theft or other fraud to person or property. "Data breach" does not include either of the following:

(1) Good faith acquisition of personal information or restricted information by the covered entity's employee or agent for the purposes of the covered entity's, provided that the personal information or restricted information is not used for an unlawful purpose or subject to further unauthorized disclosure;

(2) Acquisition of personal information or restricted information pursuant to a search warrant, subpoena, or other court order, or pursuant to a subpoena, order, or duty of a regulatory state agency.

(D) "Personal information" has the same meaning as in section 1349.19 of the Revised Code.

(E) "Restricted information" means any information about an individual, other than personal information, that, alone or in combination with other information, including personal information, can be used to distinguish or trace the individual's identity or that is linked or linkable to an individual, if the information is not encrypted, redacted, or altered by any method or technology in such a manner that the information is unreadable, and the breach of which is likely to result in a material risk of identity theft or other fraud to person or property.

As used in this division, "encrypted," "individual," and "redacted" have the same meanings as in section 1349.19 of the Revised Code.
Notes of Decisions
Cited in 4 cases (3 in the last 5 years), 2005–2025 · leading case: Barix Clinics of Ohio, Inc. v. Longaberger Fam. of Companies Grp. Med. Plan, 459 F. Supp. 2d 617 (S.D. Ohio 2005).
Sort: Relevance Newest Treatment
Barix Clinics of Ohio, Inc. v. Longaberger Fam. of Companies Grp. Med. Plan, 459 F. Supp. 2d 617 (S.D. Ohio 2005). “Code § 1354.01, et seq., breach of implied contract, and unjust enrichment.”
Mulkey v. RoundPoint Mortg. Servicing Corp. (N.D. Ohio 2021). · cites it 2× “Ohio Rev. Code Ann. § 1354.01 (West). Therefore, the fact that a statute provides a statutory defense against breach of data implies that the law also presumes that such covered businesses have a duty to protect such data.”
Waseleski v. City of Brooklyn (N.D. Ohio 2025). · cites it 2× “Ohio Data Protection Act (SB 220), codified at Ohio Rev. Code §§ 1354.01–1354.05. First, the factual pleadings under Count 10 are wholly irrelevant to such a claim, focusing instead on the alleged unlawful search and seizure of Plaintiff during the January 3, 2021 traffic stop.”
Gales v. Ohio Lottery Comm., 2025 Ohio 5189 (Ohio Ct. Cl. 2025). “04 explicitly states: “Sections 1354.01 to 1354.05 of the Revised Code shall not be construed to provide a private right of action, including a class action, with respect to any act or practice regulated under those sections.”
Annotations are extracted automatically from the opinions in the Syfert caselaw corpus and ranked by authority, recency, and treatment. Dots show Syfertize treatment of the citing case itself.