On June 16, New Mexico's data breach notification law became effective, leaving Alabama and South Dakota as the only states without such laws. The law governs data breach notification requirements for entities storing and using personal identifying information about New Mexico residents and also establishes requirements for securing and disposing of that information. The bill generally requires notification to affected consumers in the event of a breach within 45 days of discovery of the breach.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.