Ask Reggi Your Question Now
Can you summarize MTCO 30-14-1704?
Impediment of Identity Theft > Computer security breach
Short Summary
This legal document, part of the Montana Code on Unfair Trade Practices and Consumer Protection, governs the disclosure of computer security breaches involving personal information. It applies to any person or business conducting business in Montana that owns or licenses computerized data containing personal information, as well as any person or business that maintains such data that they do not own. The document requires the disclosure of breaches to Montana residents whose unencrypted personal information was or is reasonably believed to have been acquired by an unauthorized person. The disclosure must be made without unreasonable delay, taking into account law enforcement needs or measures necessary to determine the scope of the breach and restore data system integrity. The document also allows for delayed notification if requested by law enforcement. It defines a breach of the security of the data system as the unauthorized acquisition of computerized data that compromises the security, confidentiality, or integrity of personal information and causes or is reasonably believed to cause loss or injury to a Montana resident. The document provides definitions for personal information and outlines various methods of providing notice. It also recognizes that businesses with their own notification procedures are considered compliant if they notify affected individuals in accordance with their policies. Additionally, the document addresses coordination with consumer credit reporting agencies and requires the submission of notifications to the attorney general’s consumer protection office. Penalties for non-compliance are not specified.
Whom does it apply to?
Any person or business that conducts business in Montana and owns or licenses computerized data that includes personal information, and any person or business that maintains computerized data that includes personal information that they do not own
What does it govern?
Computer security breach
What are exemptions?
No exemptions are mentioned.
What are the Penalties?
Not specified.
Jurisdiction
Montana