Arizona data breach law
Arizona Revised Statutes, Sections 18-551 and 18-552
- Applies to
- Businesses that own, maintain or license unencrypted computerized personal information about Arizonans.
- What it asks
- Notice to affected people within 45 days of determining a breach, and when more than 1,000 people are affected, notice to the three largest consumer reporting agencies and the Attorney General.
- What the software does
- Permissions, multi-factor sign-in and an audit trail that shows who opened which document, which is where an investigation starts.