Breach Based on Harm Threshold: YES
Deadline for Consumer Notice: As soon as practicable and without unreasonable delay
Government Notification Required: YES
Scope of this Summary
Form of Covered Info
Encryption Safe Harbor
Timing: Must be made as soon as practicable and without unreasonable delay when covered entity knows or has reason to know a breach or other unauthorized acquisition or use of covered info has occurred.
Content: Notice must include information about resident's right to obtain a police report, how to request a security freeze, and any fees required to be paid to any CRAs for a security freeze. Notification must not include the nature of the incident or the number of residents affected by the incident.
Method: By written notice or electronic notice (if consistent with E-SIGN and Mass. Gen Laws ch 110G). Substitute notice is available if certain criteria are satisfied.