Breach Based on Harm Threshold: YES
Deadline for Consumer Notice: No later than 45 days
Government Notification Required: YES, if>1,000 residents notified
Scope of this Summary
Form of Covered Info
Encryption Safe Harbor
Timing: If notification required following good faith and prompt investigation, must be made in the most expedient time possible, but not later than 45 calendar days following notification of breach or determination that breach occurred and is reasonably likely to cause substantial harm to residents.
Content: Notice must contain: description of covered info subject to breach; date, estimated date, or estimated date range of breach; general description of actions taken to restore security and confidentiality of covered info; general description of steps the affected resident can take to protect against identity theft; and contact info for covered entity that affected resident can use to inquire about breach.
Method: By written notice (to address in covered entity's records) or electronic notice (to email address in covered entity's records). Substitute notice is available if certain criteria are satisfied.