A person that owns or licenses personal identifying information of a New Mexico resident shall implement and maintain reasonable security procedures and practices appropriate to the nature of the information to protect the personal identifying information from unauthorized access, destruction, use, modification or disclosure.
History: Laws 2017, ch. 36, § 4.
Effective dates. — Laws 2017, ch. 36 contained no effective date provision, but, pursuant to N.M. Const., art. IV, § 23, was effective June 16, 2017, 90 days after the adjournment of the legislature.
Structure New Mexico Statutes
Chapter 57 - Trade Practices and Regulations
Article 12C - Data Breach Notification
Section 57-12C-1 - Short title.
Section 57-12C-2 - Definitions.
Section 57-12C-3 - Disposal of personal identifying information.
Section 57-12C-4 - Security measures for storage of personal identifying information.
Section 57-12C-6 - Notification of security breach.
Section 57-12C-7 - Notification; required content.
Section 57-12C-8 - Exemptions.
Section 57-12C-9 - Delayed notification.
Section 57-12C-10 - Notification to attorney general and credit reporting agencies.
Section 57-12C-11 - Attorney general enforcement; civil penalty.
Section 57-12C-12 - State of New Mexico and political subdivisions exempted.