State Breach Law

New Mexico Data Breach Notification Law

N.M. Stat. Ann. §§ 57-12C-1 to 57-12C-12 • Effective 2017-06-16

New Mexico gives you 45 days to notify affected residents. AG notification also required.

Notification deadline: 45 days

Enforcement: New Mexico Attorney General

Overview

New Mexico requires notification within 45 days of discovering a breach affecting personal information.

Who Must Be Notified

  • Affected New Mexico residents
  • New Mexico Attorney General

Covered Data Types

Social Security number, Driver's license number, Financial account numbers, Biometric data, Health information

Notification Requirements

  • Written notice
  • Must include breach description

Is your business exposed?

Exemptions

  • Encrypted data
  • Good faith acquisition

Penalties

Up to $150,000 per breach

If You Experience a Breach

  1. 1.

    Notify AG and residents within 45 days

Official Source

https://www.nmag.gov/

Other State Breach Laws

New York, Texas, Florida

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required