Mississippi. Breach notification. Act
MS breach lawMississippi data breach notification law (Miss. Code § 75-24-29)
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
Requires businesses (and in most cases public bodies) that own or license computerised personal information about Mississippi residents to notify affected individuals after a security breach. Core timing rule: Individuals without unreasonable delay. Covered data: name plus SSN, driver's licence/ID, financial account or card numbers with codes.
- Key themes
- Unique features
Low substitute-notice thresholds ($5,000 cost / 5,000 persons); vendor duty limited to acquisitions for fraudulent purposes.
- SaaS relevance
A SaaS provider hosting customer data is usually the 'maintaining' entity, not the owner: Mississippi requires the maintaining entity to notify the owner as soon as practicable. The owner customer then carries the individual and regulator notices, so contracts should fix timelines and cooperation.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- Individuals without unreasonable delay; no AG or CRA notice
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- Unfair trade practice enforced by AG (Consumer Protection Act penalties up to $10,000 per violation)
§3Dates
- Key dates
- Adopted
- In force
- No amendment identified since enactment
§4Text and authority
- Text
- Authoritative text law.justia.com
- Authority
- Mississippi Attorney General
§5Where it applies
- Domestic law of
- Mississippi
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.