Breach Based on Harm Threshold: NO
Deadline for Consumer Notice: As soon as possible and without unreasonable delay
Government Notification Required: YES
Scope of this Summary
First name or first initial and last name, plus: Social Security number; driver’s license or state ID card number; account, credit or debit card number in combination with any information that allows access to a resident’s financial account; unique electronic identification number or routing code combined with any required security code, access code, or password; or unique biometric data, such as a fingerprint, voice print, or retina or iris image, or other unique physical representation.
OR user name or email address, in combination with a password or security question and answer that would permit access to an online account.
Form of Covered Info
Encryption Safe Harbor
Timing: If, after a reasonable and prompt investigation conducted in good faith, covered entity determines that covered info has been or is reasonably likely to be used for an unauthorized purpose, notice to affected resident must be made as soon as possible and without unreasonable delay, consistent with any measures necessary to determine the scope and restore the reasonable integrity of the system.
Method: By written notice, telephone notice, or electronic notice if consistent with E-SIGN. Substitute notice is available if certain criteria are satisfied.