IAPP CIPP/US Practice Exam

Category - Professional

New Mexico’s enactment of HB 15 established the state’s first data breach requirement. The law applies to unencrypted computerized data or encrypted computerized data when:
  1. The encryption key or code has been compromised
  2. The encryption is not valid
  3. The data is considered PII
  4. The compromised data set includes biometric data
Explanation
Answer: A - Under New Mexico’s HB 15, data breach notifications cover encrypted data when compromised by the encryption key or code.
 
New Mexico was the 48th US state to enact laws requiring data breach notification at the state level. Tennessee is one of the only states requiring breach notifications for encrypted data.
Was this helpful? Upvote!
Login to contribute your own answer or details

Top questions

Related questions

Most popular on PracticeQuiz