Publications
February 6, 2012

What to do After a Data Breach: A Primer on Maine's Security Breach Law

Your company just discovered a security breach resulting in the disclosure of personal information concerning customers, vendors, employees, or other individuals.  What now? 

The purpose of this primer is to provide an introduction to what you need to know about notification requirements under Maine's Notice of Risk to Personal Data Act, 10 M.R.S. §§ 1346-1350-B (the "Act").

The essential purpose of the Notice of Risk to Personal Data Act is informational -- to ensure prompt notification to persons at risk of identity theft.  The Act prohibits use of personal information acquired through a security breach, imposes prompt notification requirements in the event of a security breach, provides for enforcement and penalties, and requires that law enforcement provide a police report in connection with any reported misuse of personal information. 

In the absence of a uniform federal law governing notice requirements in the event of a data breach, the states have enacted a patchwork of notice requirements.  At present 46 states plus the District of Columbia, Puerto Rico and the Virgin Islands (and New York City) have enacted security breach notification laws.  The holdouts are Alabama, Kentucky, New Mexico, and South Dakota.  Maine law applies to Maine residents.  Notification to residents of other states is governed by the law of the state of residence. 

The Act is a key part of the legal puzzle when it comes to notification of data breaches involving Maine residents, but it is not the whole story.  A response to a data breach by financial institutions involves federal law.  State law tort claims (e.g., negligence) and unfair trade practices acts at the state and federal level provide incentives to respond thoughtfully to security breaches.  Relevant contracts may also address data breach, confidentiality, or related requirements.  As in any risk management situation – data breaches are no exception – insurance should also be top of mind.

Download What to do after a Data Breach: A Primer on Maine's security breach law" for more information on:

  • How does the Act define a security breach?
  • Who is subject to the Act?
  • How is "personal information" defined?
  • Does the Act apply to paper records?
  • Do I have to investigate once I become aware of a security breach?
  • What triggers the duty to notify?
  • Who has to be notified?
  • Does Maine have a notification form?
  • What are the required contents of the notification?
  • How quickly do I have to notify?
  • Are there penalties for non-compliance with the Act?
  • Does the Act create a private right of action?

Questions?

For further information about security breach reporting requirements and related privacy or confidentiality issues, please contact Sig Schutz at Preti Flaherty's Portland, Maine office at [email protected] or 207-791-3000.  Sig and other attorneys at Preti Flaherty have advised numerous companies in responding to security breaches and the firm has served as defense counsel in security breach litigation.

Firm Highlights

Publication

Legislative Alert: 2020 Election and State House Update

(Current as of 11/4/20 at 2:30 PM EST) Presidential Maine is one of two states in the country that splits its electoral votes. As in 2016, this turned Maine’s more rural 2nd Congressional District...

News

Preti Flaherty Adds Six to Environmental and Litigation Practice Groups

Preti Flaherty is pleased to announce the arrival of six new members to the firm: Katherine L. Oaks, Kevin C. Osantowski, Laura Lee Barry Wommack, Nicholas A. Dube, Martin C. Topol, and Allaina Murphy...

News

U.S. News – Best Lawyers Ranks Preti Flaherty Among 2021 Best Law Firms

Preti Flaherty has been named among the 2021 Best Law Firms by the U.S. News – Best Lawyers rankings. To be eligible for ranking, a law firm must have at least one attorney named...

Press Coverage

Diverse Lawyers Matter: Maine’s Legal Community Tackles Racism in the Profession

Mainebiz surveys local attorneys on the ongoing lack of diversity in the legal profession, how public opinion has changed in the last few years in confronting the issue, some of the reasons this problem persists...

Publication

Legislative Alert: Legislative Leadership Election Update

The Senate Democratic Caucus met on November 5 th and, as expected, re-elected their current leadership team. Thus Senate President Troy Jackson (D-Aroostook), Senate Majority Leader Nate Libby (D-Androscoggin), and Senate Majority Assistant Leader...

Publication

Legislative Alert: House Democratic and Senate Republican Leadership Elections

Senate Republicans held their leadership votes on Tuesday, November 10 th . As expected, Senator Jeff Timberlake was elected as Republican Leader. Both Senator Matt Pouliot and Senator Trey Stewart ran to be the...

News

Preti Flaherty Joins Maine Justice Foundation for Racial Justice Fund

As part of our ongoing efforts to promote racial justice, Preti Flaherty has joined with the Maine Justice Foundation and other local businesses and philanthropists to create the Racial Justice Fund . Each of the 22 founders...

News

Twenty-Three Preti Flaherty Attorneys Selected for Inclusion in 2020 Super Lawyers

Twenty-three Preti Flaherty attorneys have been selected for recognition by Super Lawyers , including thirteen Rising Stars. Super Lawyers rates outstanding lawyers throughout the United States in more than 70 practice areas. Only five...

Publication

How to comply with Maine’s new paid leave law

Fittingly, “Vacation Land” is among a small contingent of states that have a paid leave law on the books.  Maine, however, is somewhat unique in that the paid leave afforded under the new law...

Press Coverage

Trump Legal Team Pursues Contradictory Strategy

As the Trump campaign continues to present court challenges to electoral procedures, the Portland Press Herald interviews several Maine attorneys, including Matt Warner of Preti Flaherty, on the merits of the cases and their...