Ask Reggi Your Question Now
Can you summarize NHRS 359-C:20?
RIGHT TO PRIVACY > Notification of Security Breach Required.
Short Summary
This legal document, part of the New Hampshire Revised Statutes under the chapter ‘Right to Privacy’, governs the notification requirements for security breaches involving personal information. It applies to any person doing business in New Hampshire who owns or licenses computerized data containing personal information. The document also applies to any person or business that maintains computerized data containing personal information that they do not own. The document requires prompt determination of the likelihood of misuse of the information in case of a security breach. If misuse is determined or cannot be determined, affected individuals must be notified as soon as possible. Additionally, trade or commerce entities subject to RSA 358-A:3, I must notify the relevant regulator, while others must notify the New Hampshire attorney general’s office. The document provides various methods of notification, including written, electronic, telephonic, and substitute notice. The notice must include a description of the incident, the approximate date of the breach, the type of personal information obtained, and the contact information of the person subject to this section. The document also allows for delayed notification if it would impede a criminal investigation or jeopardize national or homeland security. Compliance with security breach notification procedures issued by state or federal regulators is deemed sufficient. If more than 1,000 consumers need to be notified, consumer reporting agencies must also be notified. The document does not specify any penalties for non-compliance.
Whom does it apply to?
Any person doing business in New Hampshire who owns or licenses computerized data that includes personal information, and any person or business that maintains computerized data that includes personal information that they do not own
What does it govern?
Notification of security breach
What are exemptions?
No exemptions are mentioned.
What are the Penalties?
Not specified.
Jurisdiction
New Hampshire