Relating to data security; prescribing an effective date.

Requires person that owns, licenses, has control over or has access to personal information and was subject to breach of security to notify consumer to whom personal information pertains and, if number of consumers to whom person must send notice exceeds 250, to Attorney General. Requires person to give notice in most expeditious manner possible, without unreasonable delay, but not later than 45 days after discovering or receiving notice of breach of security. Requires person, in providing notice, to determine sufficient contact information for notice recipients, to determine scope of breach of security and to restore integrity, security and confidentiality of personal information. Provides…