Maine Data Breach Notification Law

Maine LD 1671 of 2006 requires that an information broker that maintains computerized data that includes personal information that becomes aware of a breach of the security of the system shall conduct in good faith a reasonable and prompt investigation to determine the likelihood that personal information has been or will be misused, and shall give notice of a breach of the security of the system, following discovery or notification of the security breach, to a resident of this state whose personal information has been, or is reasonably believed to have been, acquired by an unauthorized person. The policy detects combinations of Personally Identifiable Information (PII) like social security, credit card, and driver’s license numbers. The rules for this policy are:

• Maine Data Breach Notification Law: Name and SSN
• Maine Data Breach Notification Law: Name and DL
• Maine Data Breach Notification Law: Name and CCN
• Maine Data Breach Notification Law: Name and Password (Wide)
• Maine Data Breach Notification Law: Name and Password (Default)
• Maine Data Breach Notification Law: (Narrow)
• Maine Data Breach Notification Law: Password Dissemination for HTTP Traffic (Wide)
• Maine Data Breach Notification Law: Password Dissemination for HTTP Traffic (Default)
• Maine Data Breach Notification Law: Password Dissemination for HTTP Traffic (Narrow)
• Maine Data Breach Notification Law: Account and Password