On January 25, the South Dakota Senate passed a bill that would be the state's first data breach notification law. The bill would require persons or companies that conduct business in the state and retain electronic personal information of South Dakota residents to notify residents of any "breach of system security" involving such personal information within 60 days of discovery or initial notification of the security breach. The bill is currently being considered by the South Dakota House of Representatives.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.