§ 38-13-1401 — Definitions - applicability

(1) In this part 14, personal
information means:

(a) Information that identifies or reasonably can be used to identify an
individual, such as first and last name in combination with the individual's:

(I) Social security number or other government-issued number or identifier;

(II) Date of birth;

(III) Home or physical address;

(IV) Electronic-mail address or other online contact information or internet
provider address;

(V) Financial account number or credit or debit card number;

(VI) Biometric data, health or medical data, or insurance information; or

(VII) Passwords or other credentials that permit access to an online or other
account;

(b) Personally identifiable financial or insurance information, including
nonpublic personal information defined by applicable federal law; and

(c) Any combination of data that, if accessed, disclosed, modified, or
destroyed without authorization of the owner of the data or is lost or misused,
would require notice or reporting under applicable federal and state privacy and
data security law, whether or not the administrator or the administrator's agent is
subject to the law.

(2) Provisions of this part 14 applicable to the administrator or the
administrator's records apply to an administrator's agent.

Legislative History

Source: L. 2019: Entire article R&RE, (SB 19-088), ch. 110, p. 457, � 1, effective July 1, 2020.