Breach Based on Harm Threshold: YES
Deadline for Consumer Notice: As soon as practicable and without unreasonable delay
Government Notification Required: YES
Scope of this Summary
Form of Covered Info
Encryption Safe Harbor
Timing: Must be made as soon as practicable and without unreasonable delay when covered entity knows or has reason to know a breach or other unauthorized acquisition or use of covered info has occurred.
Content: Notice must include information about resident's right to obtain a police report, how to request a security freeze, and any fees required to be paid to any CRAs. Notification must not include the nature of the incident or the number of residents affected by the incident.
Method: By written notice or electronic notice (if consistent with E-SIGN and Mass. Gen Laws ch 110G). Substitute notice is available if certain criteria are satisfied.