Duty LXD-1051
Processes personal data, in Idaho
Identity Theft Act, breach notification enforcement and penaltiessince 2 lines
Idaho Code § 28-51-107 · Read the law's page
- Expect a violation of Idaho's breach notice duty to be enforced by your primary regulator, not by a private plaintiff.
- Avoid an intentional failure to give required notice; it carries a civil fine of up to $25,000 per breach.
Identity Theft Act, breach of security disclosure dutyin force2 lines
Idaho Code § 28-51-105 · Read the law's page
- On becoming aware of a breach of system security, investigate in good faith, reasonably and promptly, whether personal information has been or will be misused; if misuse of information about an Idaho resident has occurred or is reasonably likely to occur, give each affected resident notice as soon as possible, in the most expedient time possible and without unreasonable delay.
- If you are a government agency, also notify the Idaho Attorney General within 24 hours of discovering the breach; this duty does not extend to a private commercial entity.for a public body
- Do not treat a breach exposing only biometric, genetic, or health data as triggering this notice duty. Idaho's breach definition of personal information does not include those categories.