#MAINE DUTY TO INFORM CODE#
#MAINE DUTY TO INFORM LICENSE#

Notification must be made in the most expedient time and manner possible without unreasonable delay.

#MAINE DUTY TO INFORM LICENSE#

Enacted in 2005, Arkansas’s data breach notification legislation requires entities - regardless of their location - that acquire, own, or license computerized personal information relating to Arkansas residents to notify affected individuals of unauthorized acquisitions of computerized data that compromises the security, confidentiality, or integrity of personal information maintained by the entity.

#MAINE DUTY TO INFORM CODE#

Civil penalties of up to $10,000 to $500,000 are stipulated.Īrkansas Code 4-110-101: Personal Information Protection Act.

Breached third parties must notify the relevant data owners or licensees as soon as possible.

Entities in compliance with relevant federal and state regulations, HIPAA or the GLBA are deemed to comply with this law.Entities that maintain their own notification procedures are deemed to comply with the notification requirements of this law, if the procedures are consistent with statute and are followed in the event of a breach.Entities must notify the Attorney General in writing if the entity is required to notify more than 1,000 Arizona residents.Notification is not required if an investigation determines a breach has not resulted in or is not reasonably likely to result in substantial economic loss to affected individuals.Enacted in 2006, Arizona’s data breach notification law requires entities that conduct business in Arizona which own, maintain, or license unencrypted and unredacted computerized personal information to notify affected individuals within 45 days of determining that a breach has occurred.Civil penalties of between $500 and $50,000 are stipulated.Breached third parties must notify the relevant data owners or licensees.If more than 1,000 individuals have to be notified of a breach, breached entities must also notify all consumer reporting agencies that compile and maintain files on consumers on a nationwide basis, as defined in 15 USC Section 1681a(p), unless they are compliant with the GLBA.Notification is not required if an investigation determines that there is no reasonable likelihood to the affected individuals has resulted or will result from the information’s loss and the Attorney General is informed of this fact in writing.Acquisition can include paper-based methods. Enacted in 2008, Alaska’s data breach notification legislation requires entities that own or license the personal information of Alaska residents to notify them without unreasonable delay of any data breach that results or could result in the unauthorized acquisition of their personal information.Failure to properly notify can result in additional penalties of up to $5,000 per day for each consecutive day there is a failure to comply with notification provisionsĪlaska Statutes 45.48.010: Personal Information Protection Act Civil penalties as high as $500,000 per breach are stipulated.They must still provide written notice to the Alabama Attorney General when the number of individuals the entity notified exceeds 1,000. Substitute notice is permitted in specific circumstances and notification may be delayed for law enforcement purposes.

If more than 1,000 individuals must be notified of a breach, breached entities must also notify the Attorney General, and all consumer reporting agencies that compile and maintain files on consumers on a nationwide basis, as defined in 15 U.S.C.Breached third parties must notify the relevant data owners or licensees within 10 days.Notification is not required if it is determined the breach is not reasonably likely to cause substantial harm to affected individuals.

Notification in writing must be made as expeditiously as possible and without unreasonable delay, and no later than 45 days of receipt of notice of the breach.

Enacted in 2018, Alabama’s data breach notification legislation requires entities that acquire or use “sensate personally identifying information” of Alabama residents to notify affected individuals of any unauthorized acquisition of data.

Maine duty to inform