Business owners dealing with other people’s data, please take note: The Governor signed HB 15 Data Breach Notification Act. This new law requires notice be given to persons who are affected by a security breach involving their personal identifying information (PII).
It also requires a person who owns or maintains computerized data elements that include PII to notify each New Mexico resident whose unencrypted PII is reasonably believed to have been subject to a security breach, generally within 45 days following discovery of the breach. The bill sets out required contents and methods of notification.