22-40-23. Notice of breach of system security in accordance with information holder's policies.
Notwithstanding §22-40-22, if an information holder maintains its own notification procedure as part of an information security policy for the treatment of personal or protected information and the policy is otherwise consistent with the timing requirements of this section, the information holder is in compliance with the notification requirements of §22-40-22 if the information holder notifies each person in accordance with the information holder's policies in the event of a breach of system security.
Source: SL 2018, ch 135, §5.
Structure South Dakota Codified Laws
Section 22-40-1 - Impersonation with intent to deceive law enforcement officer--Misdemeanor.
Section 22-40-8 - Identity theft--Felony.
Section 22-40-9 - Identifying information defined.
Section 22-40-10 - Physical presence in county not necessary to commission of identity theft.
Section 22-40-11 - Reencoder and scanning device defined.
Section 22-40-12 - Unauthorized use of scanning device on payment card--Felony.
Section 22-40-13 - Unauthorized use of reencoder on payment card--Felony.
Section 22-40-15 - Making or possessing forgery or counterfeiting devices--Felony.
Section 22-40-17 - Impersonating a judicial official--Misdemeanor .
Section 22-40-18 - Misuse of tribal identification card.
Section 22-40-19 - Definition of terms in §§ 22-40-19 to 22-40-26.
Section 22-40-20 - Notice of breach of system security--Exception.
Section 22-40-21 - Delay of notice that would impede criminal investigation.
Section 22-40-22 - Types of notice of breach of system security.
Section 22-40-24 - Notice to consumer reporting agencies.
Section 22-40-25 - Prosecution for violations.
Section 22-40-26 - Notice of breach of system security in accordance with federal law.