A person that owns or licenses records containing personal identifying information of a New Mexico resident shall arrange for proper disposal of the records when they are no longer reasonably needed for business purposes. As used in this section, "proper disposal" means shredding, erasing or otherwise modifying the personal identifying information contained in the records to make the personal identifying information unreadable or undecipherable.
History: Laws 2017, ch. 36, § 3.
Effective dates. — Laws 2017, ch. 36 contained no effective date provision, but, pursuant to N.M. Const., art. IV, § 23, was effective June 16, 2017, 90 days after the adjournment of the legislature.
Structure New Mexico Statutes
Chapter 57 - Trade Practices and Regulations
Article 12C - Data Breach Notification
Section 57-12C-1 - Short title.
Section 57-12C-2 - Definitions.
Section 57-12C-3 - Disposal of personal identifying information.
Section 57-12C-4 - Security measures for storage of personal identifying information.
Section 57-12C-6 - Notification of security breach.
Section 57-12C-7 - Notification; required content.
Section 57-12C-8 - Exemptions.
Section 57-12C-9 - Delayed notification.
Section 57-12C-10 - Notification to attorney general and credit reporting agencies.
Section 57-12C-11 - Attorney general enforcement; civil penalty.
Section 57-12C-12 - State of New Mexico and political subdivisions exempted.