Requiring disclosure to consumers of breaches in security by persons or businesses (data warehouses) maintaining personal information in computerized data form, defining breach and personal information; specifying certain authorized methods of notice delivery, requiring coordination with consumer reporting agencies; prohibiting waiver; providing exemptions; requiring government entity comprehensive security assessments of personal information maintained by the entities; requiring enforcement by the attorney general
(Ch. 167, 2005)