Bill > SB2046

This bill amends Mississippi's existing data breach notification law by adding a new requirement for businesses to report significant security breaches to the Office of the Attorney General. Specifically, if a data breach affects more than 100 individuals, the affected entity must provide a written notice to the Attorney General that includes details such as a synopsis of the breach, the approximate number of affected individuals, any free services being offered to those individuals, and contact information for further inquiries. The notification must be made expeditiously and without unreasonable delay. The bill defines a "breach of security" as unauthorized acquisition of electronic data containing personal information (like social security numbers, driver's license numbers, or financial account details) that has not been encrypted or made unreadable. The Attorney General is granted the power to create rules and regulations to enforce these requirements, and failure to comply is considered an unfair trade practice that can be enforced by the Attorney General, though the law does not create a private right of action for individuals. The new provisions will take effect on July 1, 2025, giving businesses time to prepare for the new reporting requirements.

Business and Industry

https://billstatus.ls.state.ms.us/2025/pdf/history/SB/SB2046.xml