Amend the bill by striking out all of section 3 and inserting the following:
‘Sec. 3. 10 MRSA §1348, sub-§3, as enacted by PL 2005, c. 379, §1 and affected by §4, is amended to read:
3. Delay of notification; criminal investigation by law enforcement. The If, after the completion of an investigation required by subsection 1, notification is required under this section, the notification required by this section may be delayed if for no longer than 7 business days after a law enforcement agency determines that the notification will not compromise a criminal investigation ; the notification required by this section must be made after the law enforcement agency determines that it will not compromise the investigation.’
Amend the bill by inserting after section 4 the following:
‘Sec. 5. Application. This Act applies to a security breach discovered by a person subject to the Maine Revised Statutes, Title 10, chapter 210-B on or after the effective date of this Act.’
summary
This amendment clarifies that notification to persons affected by a security breach may not be delayed longer than 7 business days after law enforcement has determined notification will not compromise any criminal investigation. The amendment also provides that the changes to the security breach notification laws apply to a security breach discovered on or after the effective date of the changes.