SANTA FE – Wednesday evening, the House of Representatives unanimously passed House Bill 15, known as the Data Breach Notification Act. The legislation is sponsored by Rep. Bill Rehm (R-Bernalillo).
House Bill 15 would require service providers to implement reasonable procedures to protect the personal identifying information (PII) of consumers within their custody. It also would require providers to notify consumers whose PII may have been compromised by a security breach. Notice must be given to the Attorney General’s Office and major consumer reporting agencies about security breaches affecting more than one thousand individuals no later than 45 days after the breach was discovered.
“New Mexico is one of three states that do not have a data breach notification law,” Rehm said. “Our laws have not kept up with the pace of technology. This bill will remedy a gap in our existing consumer protections and put us on par with other states.”
House Bill 15 will now be sent to the Senate for consideration.