Breach-notification law
In one sentence
State and federal laws requiring you to notify people (and sometimes regulators) when their personal data is exposed.
All 50 US states have breach-notification laws with deadlines that start when a breach is discovered. Depending on your data and location, you may have to notify affected individuals, state attorneys general, or regulators within a set window.
Why it's on your cyber insurance application
Why your IR plan must know who to call fast: notification clocks start at discovery.
The written evidence carriers accept
A “yes” on the application needs a document behind it. In the Readiness Pack, those documents are:
Related terms
Would you pass this question today?
The free Readiness Check scores you across the ten control domains carriers probe, in five minutes, no email required for the score.