DE Amends Computer Security Breach Notification Requirements

Delaware has enacted HB 381, amending its law concerning notice of Computer Security Breaches.  First, substitute notice (when applicable) now includes a requirement for the substitute notice to be provided to the Delaware Attorney General.  Second, in circumstances where a person cannot determine whether certain residents’ personal information was included in the breach within 60 days of determining that a breach occurred, then notice must be provided to the Attorney General within 60 days of the date the breach was determined to have occurred, unless substitute notice is or was provided, also within 60 days (which itself now would already include notice to the Attorney General).

HB 381 is effective immediately.