thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Breach Notification Laws

Laws requiring organizations to notify individuals, regulators, or others after unauthorized access to personal information.

Definition

All 50 US states, DC, and territories have breach notification laws with varying definitions of personal information, timelines (often 30 to 60 days or without unreasonable delay), regulator notice thresholds, and encryption safe harbors. Sector laws such as HIPAA and GLBA and international laws such as GDPR add requirements. Law enforcement may request delay.

Example

A breach affecting residents of 12 states requires analyzing each state's notice content and timing rules.

Exam tip

Encryption safe harbors usually apply only if the key was not also compromised.

Related terms