Ask Reggi Your Question Now
Can you summarize 6 DECO 12B-102?
COMPUTER SECURITY BREACHES > Disclosure of breach of security; notice.
Short Summary
This legal document, part of the Delaware Code, requires any person conducting business in Delaware and owning or licensing computerized data containing personal information to provide notice of any breach of security to affected residents of the state. The notice must be given without unreasonable delay but not later than 60 days after the breach is determined, unless certain exceptions apply. If the breach affects more than 500 Delaware residents, the person must also notify the Attorney General. If the breach includes a Social Security number, the person must offer affected residents credit monitoring services at no cost for one year. The document also specifies that in the case of a breach involving login credentials of an email account, the notice cannot be provided to the email address itself but must be delivered through alternative methods. The document does not specify penalties for non-compliance.
Whom does it apply to?
Any person who conducts business in Delaware and owns or licenses computerized data that includes personal information, and any person that maintains computerized data that includes personal information that they do not own or license
What does it govern?
Disclosure of breach of security; notice
What are exemptions?
The notice requirement may be delayed if a shorter time is required under federal law, if a law-enforcement agency determines that the notice will impede a criminal investigation and requests a delay, or if the person could not identify within 60 days that the personal information of certain residents was included in a breach of security
What are the Penalties?
Not specified
Jurisdiction
Delaware