CIPP/US: Certified Information Privacy Professional/United StatesDemo

By IAPP · Question Mode

QuestionQ69

State Privacy Laws

Most states with data-breach notification laws state that notice to affected individuals must be provided in the “most expeditious time possible without unreasonable delay.” By contrast, which of the following states currently imposes a definite deadline for notifying affected individuals?

Choose two
  • A Maine
  • B Florida
  • C New York
  • D California
Explanation

Maine requires notice no more than 30 days after the entity becomes aware of a security breach and identifies its scope, absent a law-enforcement delay. Florida likewise requires individual notice no later than 30 days after determining that a breach occurred or that there is reason to believe one occurred, subject to statutory exceptions. Both therefore prescribe a definite notification limit.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!