Quick Facts
Breach Based on Harm Threshold: NO
Deadline for Consumer Notice: As soon as possible and without unreasonable delay
Government Notification Required: YES
More Details
Scope of this Summary
Covered Info
First name or first initial and last name, plus: Social Security number; driver’s license or state ID card number; account, credit or debit card number in combination with any information that allows access to a resident’s financial account; unique electronic identification number or routing code combined with any required security code, access code, or password; or unique biometric data, such as a fingerprint, voice print, or retina or iris image, or other unique physical representation.
OR username or email address, in combination with a password or security question and answer that would permit access to an online account.
Form of Covered Info
Encryption Safe Harbor
Breach Defined
Consumer Notice
Timing: If, after a reasonable and prompt investigation conducted in good faith, covered entity determines that covered info has been or is reasonably likely to be used for an unauthorized purpose, notice to affected resident must be made as soon as possible and without unreasonable delay, consistent with any measures necessary to determine the scope and restore the reasonable integrity of the system.
Method: By written notice, telephone notice, or electronic notice if consistent with E-SIGN. Substitute notice is available if certain criteria are satisfied.
Delayed Notice
Harm Threshold
Government Notice
Third-Party Notice
Potential Penalties
This summary is for informational purposes only. It provides general information and not legal advice or opinions regarding specific facts. Additional requirements or conditions may apply to any or all provisions referenced herein. For more information about the state data breach notification laws or other data security matters, please seek the advice of counsel.
Last revised on July 26, 2019