What are the requirements for disclosure upon breach in the security of personal information for individuals who maintain computerized data (but do not own) that includes such information?
Any agency or person that maintains computerized data that includes personal information that the agency or person does not own shall notify the owner or licensee of the information if the personal information was, or is reasonably believed to have been, acquired by an unauthorized person through a security breach of the system containing such data, following discovery by the agency or person of a breach of security of the system.
Related Questions
- What are the requirements for disclosure upon breach in the security of personal information for individuals who maintain computerized data (but do not own) that includes such information?
- What are the requirements for disclosure upon breach in the security of personal information for individuals who conduct business in Louisiana or license/own such computerized data?
- Acquisti, Do Data Breach Disclosure Laws Reduce Identity Theft?
