By Sachin Java (November 1, 2018, 1:08 PM EDT) -- Earlier this year, Ohio Gov. John Kasich signed the Ohio Data Protection Act, which goes into effect on Nov. 2, 2018. The Data Protection Act provides "covered entities" — essentially any businesses that "accesses, maintains, processes, or communicates" personal or restricted information — a legal safe harbor in the event they do get breached, but only if they follow and maintain a cybersecurity framework in accordance with reasonable or recognized industry standards. To encourage compliance, the Data Protection Act explicitly avoids setting minimum data security levels or imposing liability on businesses that fail to maintain cybersecurity programs in compliance with the law....