Quick Facts
Breach Based on Harm Threshold: YES
Deadline for Consumer Notice: No later than 60 days
Government Notification Required: YES
More Details
Scope of this Summary
Covered Info
Form of Covered Info
Encryption Safe Harbor
Breach Defined
Consumer Notice
Timing: Must be made in most expedient time possible and without unreasonable delay, but not later than 60 days from discovery of the breach, consistent with any measures necessary to determine the scope of the breach, prevent further disclosures, and restore the reasonable integrity of the data system.
Method: By written notice or electronic notice if consistent with E-SIGN. Substitute notice is available if certain criteria are satisfied.
Delayed Notice
Harm Threshold
Government Notice
Third-Party Notice
Potential Penalties
This summary is for informational purposes only. It provides general information and not legal advice or opinions regarding specific facts. Additional requirements or conditions may apply to any or all provisions referenced herein. For more information about the state data breach notification laws or other data security matters, please seek the advice of counsel.
Last revised on July 26, 2019