New Mexico Passes Data Breach Notification And Protection Bill

On March 16, 2017, the New Mexico state legislature passed a bill requiring that New Mexico residents be notified if their "personal identifying information" was affected by a breach of electronic data. Upon signature of the bill, New Mexico will join 47 other states requiring such notification, and the only states remaining without notification laws will be Alabama and South Dakota.

The New Mexico law is similar to many other state data breach notification laws. Here are some of the bill's particulars.

• Prescribed time to notify: With limited exceptions, one must notify affected individuals "in the most expedient time possible, but not later than forty-five calendar days following discovery of the security breach."