Notificación de violación de seguridad del sistema

Explicación Simple

Si una empresa se da cuenta de que alguien ha robado información personal de sus clientes, tiene que avisar a esas personas. Tienen un plazo de 60 días para hacerlo, a menos que la policía necesite más tiempo para investigar.

Es como si en una fiesta alguien rompiera una ventana. El dueño de la casa debe avisar a los invitados sobre el peligro para que puedan estar atentos y protegerse.

Ejemplo Práctico

Imagina que la tienda de electrónica de Juan descubre que un hacker accedió a los datos de sus clientes. Juan tiene que informar a todos sus clientes sobre la violación de seguridad en un plazo de 60 días, para que puedan proteger su información personal.

Texto Original del Estatuto (Inglés)

estigation.22-40-22Types of notice of breach of system security.Types of notice of breach of system security.22-40-24Notice to consumer reporting agencies.Notice to consumer reporting agencies.22-40-25Prosecution for violations.Prosecution for violations.22-40-26Notice of breach of system security in accordance with federal law.Notice of breach of system security in accordance with federal law.An update is availableUpdateLegislative Research Council500 East Capitol Avenue | Pierre, SD 57501© 2026 - SD Legislative Research CouncilLRC Homepage|SD HomepagePress Releases|LRC Staff|Contact Us|Disclaimer HomeLegislatorsSessionInterimLawsAdministrative RulesBudgetStudentsReferencesMyLRC +SearchCodified LawsCodified LawsCodified LawsHome>Codified Laws>22>40>20PreviousNextGo To:(1-1-1) or Google SearchPrinter Friendly22-40-20.Notice of breach of system security--Exception.Following the discovery by or notification to an information holder of a breach of system security an information holder shall disclose in accordance with §22-40-22the breach of system security to any resident of this state whose personal or protected information was, or is reasonably believed to have been, acquired by an unauthorized person. A disclosure under this section shall be made not later than sixty days from the discovery or notification of the breach of system security, unless a longer period of time is required due to the legitimate needs of law enforcement as provided under §22-40-21. An information holder is not required to make a disclosure under this section if, following an appropriate investigation and notice to the attorney general, the information holder reasonably determines that the breach will not likely result in harm to the affected person. The information holder shall document the det