Breach Based on Harm Threshold: YES
Deadline for Consumer Notice: Most expedient time possible without unreasonable delay
Government Notification Required: NO
Scope of this Summary
Form of Covered Info
Encryption Safe Harbor
Timing: Must be made in the most expedient time possible without unreasonable delay following determination that covered info has been or will be misused, consistent with any measures to determine the scope of the breach and to restore the reasonable integrity of the system.
Content: Notice must be clear and consistent and include at minimum: toll-free number for covered entity or its agent, and where consumer can learn the toll-free numbers and addresses for the major CRAs; types of covered info reasonably believed to be subject to breach; a general description of the breach; the approximate date of the breach, if known; the covered entity’s general actions to guard against further breach; advice for resident to remain vigilant by reviewing account statements and monitoring credit reports; and whether notice was delayed due to law enforcement.
Method: By written notice or e-mail notice. Substitute notice is available if certain criteria are satisfied.