Indiana § 24-4.9-3-3 Delay of disclosure or notification

Indiana Statutes

§ 24-4.9-3-3 — Delay of disclosure or notification

Indiana § 24-4.9-3-3

Art. 4.9DISCLOSURE OF SECURITY BREACH

Ch. 3Disclosure and Notification Requirements

This text of Indiana § 24-4.9-3-3 (Delay of disclosure or notification) is published on Counsel Stack Legal Research, covering Indiana primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Ind. Code § 24-4.9-3-3 (2026).

Text

(a)A person required to make a disclosure or notification under this chapter shall make the disclosure or notification without unreasonable delay, but not more than forty-five (45) days after the discovery of the breach. For purposes of this section, a delay is reasonable if the delay is:

(1)necessary to restore the integrity of the computer system;

(2)necessary to discover the scope of the breach; or

(3)in response to a request from the attorney general or a law enforcement agency to delay disclosure because disclosure will:

(A)impede a criminal or civil investigation; or

(B)jeopardize national security.

(b)A person required to make a disclosure or notification under this chapter shall make the disclosure or notification as soon as possible after:

(1)delay is no longer necessary t

Free access — add to your briefcase to read the full text and ask questions with AI

(a) A person required to make a disclosure or
notification under this chapter shall make the disclosure or notification
without unreasonable delay, but not more than forty-five (45) days after
the discovery of the breach. For purposes of this section, a delay is
reasonable if the delay is:
(1) necessary to restore the integrity of the computer system;
(2) necessary to discover the scope of the breach; or
(3) in response to a request from the attorney general or a law
enforcement agency to delay disclosure because disclosure will:
(A) impede a criminal or civil investigation; or
(B) jeopardize national security.
(b) A person required to make a disclosure or notification under this
chapter shall make the disclosure or notification as soon as possible
after:
(1) delay is no longer necessary to restore the integrity of the
computer system or to discover the scope of the breach; or
(2) the attorney general or a law enforcement agency notifies the
person that delay will no longer impede a criminal or civil
investigation or jeopardize national security.