Maine - Notice of Risk to Personal Data

This download includes the Maine - Notice of Risk to Personal Data so there are no mapped questions. Use this download if you just want the provisions and you want to create your own question set.

This law aims to protect against the "Breach of the security of the system" or "security breach" which means the unauthorized acquisition, release or use of an individual's computerized data that includes personal information that compromises the security, confidentiality, or integrity of personal information of the individual maintained by a person.

Good faith acquisition, release, or use of personal information by an employee or agent of a person on behalf of the person is not a breach of the security of the system if the personal information is not used for or subject to further unauthorized disclosure to another person.

"Personal information" means an individual's first name or first initial, and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted or redacted:

• Social security number;
• Driver's license number or state identification card number;
• Account number, credit card number, or debit card number, if circumstances exist wherein such a number could be used without additional identifying information, access codes, or passwords;
• Account passwords or personal identification numbers or other access codes;
• Any of the data elements contained in paragraphs A to D when not in connection with the individual's first name, or first initial, and last name, if the information is compromised would be sufficient to permit a person to fraudulently assume or attempt to assume the identity of the person whose information was compromised.

"Personal information" does not include information from 3rd-party claims databases maintained by property and casualty insurers or publicly available information that is lawfully made available to the general public from federal, state, or local government records or widely distributed media.