<html xmlns="http://www.w3.org/1999/xhtml"><head><meta charset="UTF-8" /><meta http-equiv='content-language' content='en-us'/><title>SDLRC - Codified Law 22-40-20 - Notice of breach of system security--Exception. </title><meta name="Generator" content="PowerTools for Open XML" /><style>span { white-space: pre-wrap; } p.s2047703Normal { margin-top: 0; margin-bottom: 0; text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-left: 0; margin-right: 0; } span.s2047703SENU { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } span.s2047703CL { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } p.s2047703Normal-000000 { margin-top: 0; margin-bottom: 0; text-indent: 0.50in; text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-left: 0; margin-right: 0; } span.s2047703DefaultParagraphFont { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } p.s2047703Normal-000001 { margin-top: 0; margin-bottom: 0; text-indent: 0.25in; text-align: justify; font-family: 'Times New Roman', 'serif'; font-size: 12pt; line-height: 108%; margin-left: 0; margin-right: 0; } span.s2047703000002 { font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } span.s2047703SCL { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: bold; margin: 0; padding: 0; } span.s2047703SCL-000003 { font-family: 'Times New Roman', 'serif'; font-size: 12pt; font-style: normal; font-weight: normal; margin: 0; padding: 0; } body { text-decoration-skip-ink: none; } </style></head><body><div><p dir="ltr" class="s2047703Normal"><a href="https://sdlegislature.gov/Statutes/Codified_Laws/DisplayStatute.aspx?Type=Statute&amp;Statute=22-40-20"><span class="s2047703SENU">22-40-20</span></a><span xml:space="preserve" class="s2047703SENU">. </span><span class="s2047703CL">Notice of breach of system security--Exception.</span></p><p dir="ltr" class="s2047703Normal-000000"><span xml:space="preserve" class="s2047703DefaultParagraphFont">Following the discovery by or notification to an information holder of a breach of system security an information holder shall disclose in accordance with § </span><a href="https://sdlegislature.gov/Statutes/Codified_Laws/DisplayStatute.aspx?Type=Statute&amp;Statute=22-40-22"><span class="s2047703DefaultParagraphFont">22-40-22</span></a><span xml:space="preserve" class="s2047703DefaultParagraphFont"> the breach of system security to any resident of this state whose personal or protected information was, or is reasonably believed to have been, acquired by an unauthorized person. A disclosure under this section shall be made not later than sixty days from the discovery or notification of the breach of system security, unless a longer period of time is required due to the legitimate needs of law enforcement as provided under § </span><a href="https://sdlegislature.gov/Statutes/Codified_Laws/DisplayStatute.aspx?Type=Statute&amp;Statute=22-40-21"><span class="s2047703DefaultParagraphFont">22-40-21</span></a><span class="s2047703DefaultParagraphFont">. An information holder is not required to make a disclosure under this section if, following an appropriate investigation and notice to the attorney general, the information holder reasonably determines that the breach will not likely result in harm to the affected person. The information holder shall document the determination under this section in writing and maintain the documentation for not less than three years.</span></p><p dir="ltr" class="s2047703Normal-000001"><span class="s2047703DefaultParagraphFont">Any information holder that experiences a breach of system security under this section shall disclose to the attorney general by mail or electronic mail any breach of system security that exceeds two hundred fifty residents of this state.</span></p><p dir="ltr" class="s2047703Normal"><span xml:space="preserve" class="s2047703000002"> </span></p><p dir="ltr" class="s2047703Normal"><span class="s2047703SCL">Source:</span><span xml:space="preserve" class="s2047703SCL-000003"> SL 2018, ch 135, § 2.</span></p></div></body></html>