Introduced in the Senate on March 16, 2005, to require a state agency or a private company that maintains computerized data with personalized information on individuals to notify those individuals if a breach of security allows unencrypted personal identifying information to be acquired by an unauthorized person. The bill specifies allowable formats for the notices and the information to be included in the notice. Also, to require the notification of credit reporting agencies of a security breach that could lead to indentity theft. Failure to comply with the notification requirements would be punishable by civil fines of $1,000 for each individual affected by a security breach, up to a maximum of $2.5 million
The vote was 36 in favor, 0 opposed and 2 not voting
(Senate Roll Call 739 at Senate Journal 90)
Click here to view bill details.