The provisions of the Data Breach Notification Act shall not apply to a person subject to the federal Gramm-Leach-Bliley Act or the federal Health Insurance Portability and Accountability Act of 1996.
History: Laws 2017, ch. 36, § 8.
Cross references. — For the federal Gramm-Leach-Bliley Act, see 15 U.S.C. §§ 6801-6810
For the federal Health Insurance Portability and Accountability Act of 1996, see 42 U.S.C. 300gg et seq.
Effective dates. — Laws 2017, ch. 36 contained no effective date provision, but, pursuant to N.M. Const., art. IV, § 23, was effective June 16, 2017, 90 days after the adjournment of the legislature.
Structure New Mexico Statutes
Chapter 57 - Trade Practices and Regulations
Article 12C - Data Breach Notification
Section 57-12C-1 - Short title.
Section 57-12C-2 - Definitions.
Section 57-12C-3 - Disposal of personal identifying information.
Section 57-12C-4 - Security measures for storage of personal identifying information.
Section 57-12C-6 - Notification of security breach.
Section 57-12C-7 - Notification; required content.
Section 57-12C-8 - Exemptions.
Section 57-12C-9 - Delayed notification.
Section 57-12C-10 - Notification to attorney general and credit reporting agencies.
Section 57-12C-11 - Attorney general enforcement; civil penalty.
Section 57-12C-12 - State of New Mexico and political subdivisions exempted.