Ask Reggi Your Question Now
Can you summarize 18 AZRS Chapter 5, Article 4?
NETWORK SECURITYSec: 18-501-18-552 >
Short Summary
This legal document governs the notification requirements for security system breaches in Arizona. It applies to persons conducting business in the state who own, maintain, or license unencrypted and unredacted computerized personal information. The document defines various terms related to network security breaches, encryption, personal information, and security incidents. It specifies that certain entities like the department of public safety, county sheriff’s departments, municipal police departments, prosecution agencies, and courts are exempt from the definitions and terms mentioned in this document. If a person subject to this document becomes aware of a security incident, they must conduct an investigation to determine if a security system breach has occurred. If a breach is confirmed, the person must notify the affected individuals within 45 days and, if necessary, notify the three largest nationwide consumer reporting agencies, the Attorney General, and the Director of the Arizona Department of Homeland Security. There are exceptions for persons subject to certain federal acts and regulations, such as the Gramm-Leach-Bliley Act and the Health Insurance Portability and Accountability Act (HIPAA). Non-compliance with the notification requirements may result in a civil penalty of up to $10,000 per affected individual or the total economic loss, with a maximum penalty of $500,000 for a breach or series of breaches. The Attorney General may also seek restitution for affected individuals.
Whom does it apply to?
Persons conducting business in the state who own, maintain, or license unencrypted and unredacted computerized personal information
What does it govern?
Notification requirements for security system breaches in Arizona
What are exemptions?
Entities like the department of public safety, county sheriff's departments, municipal police departments, prosecution agencies, and courts
What are the Penalties?
Civil penalty of up to $10,000 per affected individual or the total economic loss, with a maximum penalty of $500,000 for a breach or series of breaches. The Attorney General may also seek restitution for affected individuals.
Jurisdiction
Arizona