§ 51-30-02 — Notice to attorney general and consumers

Any person that owns or licenses computerized data that includes personal information,
shall disclose any breach of the security system following discovery or notification of the breach
in the security of the data to any resident of the state whose unencrypted personal information
was, or is reasonably believed to have been, acquired by an unauthorized person. In addition,
any person that experiences a breach of the security system as provided in this section shall
disclose to the attorney general by mail or electronic mail any breach of the security system
which exceeds two hundred fifty individuals. The disclosure must be made in the most
expedient time possible and without unreasonable delay, consistent with the legitimate needs of
law enforcement, as provided in section 51-30-04, or any measures necessary to determine the
scope of the breach and to restore the integrity of the data system.