Breach Based on Harm Threshold: YES
Deadline for Consumer Notice: No later than 60 days
Government Notification Required: YES
Scope of this Summary
First name or first initial and last name, plus: Social Security number; driver's license or state identification card number; account, credit card or debit card number in combination with any required security or access code or password that would permit access to a resident's financial account; passport number; or biometric data.
In particular, 'biometric data' is defined as data generated by automatic measurements of an individual's biological characteristics, such as fingerprints, voice print, eye retina or iris, or other unique biological characteristic that is used by the owner or licensee to uniquely authenticate an individual's identity when the individual accesses a system or account.
Form of Covered Info
Encryption Safe Harbor
Timing: Must be made in most expedient time possible and without unreasonable delay, but not later than 60 days from discovery of the breach, consistent with any measures necessary to determine the scope of the breach, prevent further disclosures, and restore the reasonable integrity of the data system.
Method: By written notice or electronic notice if consistent with E-SIGN. Substitute notice is available if certain criteria are satisfied.
If notice to Louisiana residents is required, the covered entity must also provide written notice to the Consumer Protection Section of the Attorney General's office. Notice must be received within 10 days of distribution of notice to Louisiana residents and must include the names of those affected residents.