Maine § 10 §1348 Security breach notice requirements

Maine Statutes

§ 10 §1348 — Security breach notice requirements

Maine § 10 §1348

Title 10COMMERCE AND TRADE

Part 3REGULATION OF TRADE

Ch. 210-BNOTICE OF RISK TO PERSONAL DATA

This text of Maine § 10 §1348 (Security breach notice requirements) is published on Counsel Stack Legal Research, covering Maine primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Me. Rev. Stat. tit. 10, § 10 §1348 (2026).

Text

1.Notification to residents. The following provisions apply to notification to residents by information brokers and other persons.

2.Notification to person maintaining personal information. A 3rd-party entity that maintains, on behalf of a person, computerized data that includes personal information that the 3rd-party entity does not own shall notify the person maintaining personal information of a breach of the security of the system immediately following discovery if the personal information was, or is reasonably believed to have been, acquired by an unauthorized person.

3.Delay of notification; criminal investigation by law enforcement. If, after the completion of an investigation required by subsection 1, notification is required under this section, the notification required by this

Free access — add to your briefcase to read the full text and ask questions with AI

1.
Notification to residents.
The following provisions apply to notification to residents by information brokers and other persons.
2.
Notification to person maintaining personal information.
A 3rd-party entity that maintains, on behalf of a person, computerized data that includes personal information that the 3rd-party entity does not own shall notify the person maintaining personal information of a breach of the security of the system immediately following discovery if the personal information was, or is reasonably believed to have been, acquired by an unauthorized person.
3.
Delay of notification; criminal investigation by law enforcement.
If, after the completion of an investigation required by subsection 1, notification is required under this section, the notification required by this section may be delayed for no longer than 7 business days after a law enforcement agency determines that the notification will not compromise a criminal investigation.
4.
Notification to consumer reporting agencies.
If a person discovers a breach of the security of the system that requires notification to more than 1,000 persons at a single time, the person shall also notify, without unreasonable delay, consumer reporting agencies that compile and maintain files on consumers on a nationwide basis, as defined in 15 United States Code, Section 1681a(p). Notification must include the date of the breach, an estimate of the number of persons affected by the breach, if known, and the actual or anticipated date that persons were or will be notified of the breach.
5.
Notification to state regulators.
When notice of a breach of the security of the system is required under subsection 1, the person shall notify the appropriate state regulators within the Department of Professional and Financial Regulation, or if the person is not regulated by the department, the Attorney General.

Legislative History

PL 2005, c. 379, §1 (NEW). PL 2005, c. 379, §4 (AFF). PL 2005, c. 583, §§6-9 (AMD). PL 2005, c. 583, §14 (AFF). PL 2009, c. 161, §3 (AMD). PL 2009, c. 161, §5 (AFF). PL 2019, c. 512, §2 (AMD).