Ask Reggi Your Question Now
Can you summarize NJST 56:8-163?
Disclosure of breach of security to customers.
Short Summary
This legal document, part of the New Jersey General and Permanent Statutes, governs the disclosure of breach of security to customers. It applies to businesses that conduct business in New Jersey or public entities that compile or maintain computerized records containing personal information. According to the document, any business or public entity that experiences a breach of security in their computerized records must disclose the breach to any customer who is a resident of New Jersey and whose personal information was accessed by an unauthorized person. The disclosure must be made in the most expedient time possible and without unreasonable delay, taking into consideration the needs of law enforcement and measures necessary to determine the scope of the breach and restore the integrity of the data system. However, disclosure is not required if the business or public entity can establish that misuse of the information is not reasonably possible. The document also outlines the notification requirements for businesses or public entities that maintain computerized records on behalf of another entity, as well as the reporting obligations to the Division of State Police. Additionally, it provides alternative methods of notice, such as written notice, electronic notice, or substitute notice, in cases where the cost of providing notice is high or contact information is insufficient. The document does not specify any penalties for non-compliance or violations.
Whom does it apply to?
Businesses that conduct business in New Jersey or public entities that compile or maintain computerized records containing personal information
What does it govern?
Disclosure of breach of security to customers
What are exemptions?
Disclosure of a breach of security to a customer is not required if the business or public entity establishes that misuse of the information is not reasonably possible.
What are the Penalties?
No specific penalties mentioned.
Jurisdiction
New Jersey