Arizona passed a bill amending security breach disclosure requirements. Under the bill, persons that own, maintain or license personal information must provide a security breach disclosure to affected Arizona residents no later than 45 days after discovering or receiving notification of a security system breach. The bill also requires persons that own, maintain or license personal information to provide a security breach notification to the attorney general and the three largest nationwide consumer reporting agencies if a security system breach affects more than 1,000 Arizona residents. In addition, the bill: amended the definition of “personal information” and “security system breach”; mandates the information that must included in a security breach disclosure and notification; and revised requirements with respect to delivery of a security breach disclosure. The bill becomes effective August 3, 2018.
See Arizona State Legislature website for the full text of the Statute:
https://apps.azleg.gov/BillStatus/GetDocumentPdf/461941
