AN ACT TO AMEND SECTION 75-24-29, MISSISSIPPI CODE OF 1972, TO REQUIRE CERTAIN ENTITIES TO PROVIDE WRITTEN NOTICE OF A BREACH OF SECURITY TO THE OFFICE OF THE ATTORNEY GENERAL; AND FOR RELATED PURPOSES.
Impact
The bill outlines that any entity experiencing a security breach must notify all affected individuals without unreasonable delay after an investigation to assess the breach's nature and the scope of affected data. Furthermore, if the breach affects over 100 individuals, the entity must notify the Attorney General in a timely manner while providing essential details regarding the breach. This requirement is expected to establish clearer protocols for handling data breaches, thereby fostering public trust and accountability among businesses that manage personal information.
Summary
Senate Bill 2128 aims to amend Section 75-24-29 of the Mississippi Code of 1972 to establish requirements for notifying the Office of the Attorney General in the event of a breach of security involving personal information. The bill is directed at any business entity operating within the state that possesses, owns, or maintains the personal data of its residents. The proposed legislation aims to enhance consumer protection by ensuring that affected individuals are promptly informed about unauthorized access to their personal data, thereby safeguarding their privacy rights and financial security.
Contention
One notable point of contention surrounding SB2128 is the balance it seeks to strike between consumer protection and the burden it places on businesses. Supporters argue that timely notification is essential for protecting consumers from potential harm resulting from breaches, while opponents may raise concerns about the logistical challenges and financial implications of complying with stringent notification requirements. These discussions highlight the importance of maintaining data security without unduly imposing administrative burdens on businesses, especially small enterprises.