Michigan Identity Theft Protection Act

Michigan HB 4658 of 2007 requires, unless the person or agency determines that the security breach has not or is not likely to cause substantial loss or injury to, or result in identity theft with respect to, one ore more residents of this state, a person or agency that owns or licenses data that are included in a database that discovers a security breach, or receives notice of a security breach, shall provide a notice of the security breach to each resident of this state. The policy detects combinations of Personally Identifiable Information (PII) like social security, credit card, and driver’s license numbers. The rules for this policy are:

• Michigan Identity Theft Protection Act: SSN
• Michigan Identity Theft Protection Act: SSN with CCN
• Michigan Identity Theft Protection Act: SSN with Michigan DL
• Michigan Identity Theft Protection Act: SSN with Account Number
• Michigan Identity Theft Protection Act: SSN with PIN Number
• Michigan Identity Theft Protection Act: SSN and Password (Wide)
• Michigan Identity Theft Protection Act: SSN and Password (Default)
• Michigan Identity Theft Protection Act: SSN and Password (Narrow)
• Michigan Identity Theft Protection Act: SSN with DNA profile