State Breach Law

Maine Data Breach Notification Law

Me. Rev. Stat. tit. 10, §§ 1346 to 1350-B • Effective 2006-01-31

Maine has a strict 30-day deadline for notification. The Department of Professional and Financial Regulation must also be notified.

Notification deadline: 30 days

Enforcement: Maine Attorney General

Overview

Maine requires notification as expediently as possible but no later than 30 days after breach discovery.

Who Must Be Notified

  • Affected Maine residents
  • Maine Department of Professional and Financial Regulation

Covered Data Types

Social Security number, Driver's license number, Financial account numbers, Account passwords, Biometric data

Notification Requirements

  • Written notice
  • Electronic notice permitted
  • Must include contact information

Is your business exposed?

Exemptions

  • Encrypted data
  • Good faith acquisition

Penalties

Up to $500 per violation

If You Experience a Breach

  1. 1.

    Notify regulator and residents within 30 days

Official Source

https://www.maine.gov/ag/

Other State Breach Laws

New York, Texas, Florida

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required