The notification required by the Data Breach Notification Act may be delayed:
A. if a law enforcement agency determines that the notification will impede a criminal investigation; or
B. as necessary to determine the scope of the security breach and restore the integrity, security and confidentiality of the data system.
History: Laws 2017, ch. 36, § 9.
ANNOTATIONSEffective dates. — Laws 2017, ch. 36 contained no effective date provision, but, pursuant to N.M. Const., art. IV, § 23, was effective June 16, 2017, 90 days after the adjournment of the legislature.