<html xmlns="http://www.w3.org/1999/xhtml"><head><meta charset="UTF-8" /><meta http-equiv='content-language' content='en-us'/><title>SDLRC - Codified Law 22-40-19 - Definition of terms in §§ 22-40-19 to 22-40-26. </title><meta name="Generator" content="PowerTools for Open XML" /><style>span { white-space: pre-wrap; } p.s2047702Normal { text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-top: 0; margin-left: 0; margin-right: 0; margin-bottom: .001pt; } span.s2047702SENU { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } span.s2047702CL { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } p.s2047702Normal-000000 { text-indent: 0.50in; text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-top: 0; margin-left: 0; margin-right: 0; margin-bottom: .001pt; } span.s2047702DefaultParagraphFont { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } p.s2047702Normal-000001 { margin-left: 0.70in; text-indent: -0.45in; text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-top: 0; margin-right: 0; margin-bottom: .001pt; } p.s2047702Normal-000002 { margin-left: 1.14in; text-indent: -0.44in; text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-top: 0; margin-right: 0; margin-bottom: .001pt; } p.s2047702Normal-000003 { margin-left: 1.14in; text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-top: 0; margin-right: 0; margin-bottom: .001pt; } span.s2047702000004 { font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } span.s2047702SCL { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } span.s2047702SCL-000005 { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } body { text-decoration-skip-ink: none; } </style></head><body><div><p dir="ltr" class="s2047702Normal"><a href="https://sdlegislature.gov/Statutes/Codified_Laws/DisplayStatute.aspx?Type=Statute&amp;Statute=22-40-19"><span class="s2047702SENU">22-40-19</span></a><span xml:space="preserve" class="s2047702SENU">. </span><span xml:space="preserve" class="s2047702CL">Definition of terms in §§ </span><a href="https://sdlegislature.gov/Statutes/Codified_Laws/DisplayStatute.aspx?Type=Statute&amp;Statute=22-40-19"><span class="s2047702CL">22-40-19</span></a><span xml:space="preserve" class="s2047702CL"> to </span><a href="https://sdlegislature.gov/Statutes/Codified_Laws/DisplayStatute.aspx?Type=Statute&amp;Statute=22-40-26"><span class="s2047702CL">22-40-26</span></a><span class="s2047702CL">.</span></p><p dir="ltr" class="s2047702Normal-000000"><span xml:space="preserve" class="s2047702DefaultParagraphFont">Terms in §§ </span><a href="https://sdlegislature.gov/Statutes/Codified_Laws/DisplayStatute.aspx?Type=Statute&amp;Statute=22-40-19"><span class="s2047702DefaultParagraphFont">22-40-19</span></a><span xml:space="preserve" class="s2047702DefaultParagraphFont"> to </span><a href="https://sdlegislature.gov/Statutes/Codified_Laws/DisplayStatute.aspx?Type=Statute&amp;Statute=22-40-26"><span class="s2047702DefaultParagraphFont">22-40-26</span></a><span class="s2047702DefaultParagraphFont">, inclusive, mean:</span></p><p dir="ltr" class="s2047702Normal-000001"><span class="s2047702DefaultParagraphFont">(1)    "Breach of system security," the unauthorized acquisition of unencrypted computerized data or encrypted computerized data and the encryption key by any person that materially compromises the security, confidentiality, or integrity of personal or protected information maintained by the information holder. The term does not include the good faith acquisition of personal or protected information by an employee or agent of the information holder for the purposes of the information holder if the personal or protected information is not used or subject to further unauthorized disclosure;</span></p><p dir="ltr" class="s2047702Normal-000001"><span class="s2047702DefaultParagraphFont">(2)    "Encrypted," computerized data that is rendered unusable, unreadable, or indecipherable without the use of a decryption process or key or in accordance with the Federal Information Processing Standard 140-2</span></a><span xml:space="preserve" class="s2047702DefaultParagraphFont"> in effect on January 1, 2018;</span></p><p dir="ltr" class="s2047702Normal-000001"><span class="s2047702DefaultParagraphFont">(3)    "Information holder," any person or business that conducts business in this state, and that owns or licenses computerized personal or protected information of residents of this state;</span></p><p dir="ltr" class="s2047702Normal-000001"><span class="s2047702DefaultParagraphFont">(4)    "Personal information," a person's first name or first initial and last name, in combination with any one or more of the following data elements:</span></p><p dir="ltr" class="s2047702Normal-000002"><span class="s2047702DefaultParagraphFont">(a)    Social security number;</span></p><p dir="ltr" class="s2047702Normal-000002"><span class="s2047702DefaultParagraphFont">(b)    Driver license number or other unique identification number created or collected by a government body;</span></p><p dir="ltr" class="s2047702Normal-000002"><span class="s2047702DefaultParagraphFont">(c)    Account, credit card, or debit card number, in combination with any required security code, access code, password, routing number, PIN, or any additional information that would permit access to a person's financial account;</span></p><p dir="ltr" class="s2047702Normal-000002"><span class="s2047702DefaultParagraphFont">(d)    Health information as defined in 45 CFR 160.103; or</span></p><p dir="ltr" class="s2047702Normal-000002"><span class="s2047702DefaultParagraphFont">(e)    An identification number assigned to a person by the person's employer in combination with any required security code, access code, password, or biometric data generated from measurements or analysis of human body characteristics for authentication purposes.</span></p><p dir="ltr" class="s2047702Normal-000003"><span class="s2047702DefaultParagraphFont">The term does not include information that is lawfully made available to the general public from federal, state, or local government records or information that has been redacted, or otherwise made unusable; and</span></p><p dir="ltr" class="s2047702Normal-000001"><span class="s2047702DefaultParagraphFont">(5)    "Protected information," includes:</span></p><p dir="ltr" class="s2047702Normal-000002"><span class="s2047702DefaultParagraphFont">(a)    A user name or email address, in combination with a password, security question answer, or other information that permits access to an online account; and</span></p><p dir="ltr" class="s2047702Normal-000002"><span class="s2047702DefaultParagraphFont">(b)    Account number or credit or debit card number, in combination with any required security code, access code, or password that permits access to a person's financial account;</span></p><p dir="ltr" class="s2047702Normal-000001"><span class="s2047702DefaultParagraphFont">(6)    "Unauthorized person," any person not authorized to acquire or disclose personal information, or any person authorized by the information holder to access personal information who has acquired or disclosed the personal information outside the guidelines for access of disclosure established by the information holder.</span></p><p dir="ltr" class="s2047702Normal"><span xml:space="preserve" class="s2047702000004"> </span></p><p dir="ltr" class="s2047702Normal"><span class="s2047702SCL">Source:</span><span xml:space="preserve" class="s2047702SCL-000005"> SL 2018, ch 135, § 1.</span></p></div></body></html>