공공행정 커맨드 센터 14개 항목
State Data Breach Notification Compliance Checklist
이 체크리스트는 영어로 제공됩니다.
Guides a public agency's response when personal information is compromised, covering breach determination, notification content, timing, and regulator reporting under state law.
State Breach Notification StatutesState PII DefinitionsState AG Notice Requirements
무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.
Breach Determination
- Was 'personal information' as defined by the applicable state statute involved? *
- Was the data unencrypted, or was the encryption key also compromised? *
- Has a risk-of-harm analysis been conducted where the statute permits? *
- Have all states of residence of affected individuals been identified (multi-state analysis)? *
Notification Timing
- Is notice to affected residents provided within the statutory deadline (e.g., without unreasonable delay / a fixed day count)? *
- Was any law-enforcement delay request documented? *
- Date breach discovered: *
Notice Content & Method
- Does the notice include the required content (description, data types, date, contact, and remediation steps)? *
- Was notice delivered by an approved method (written, electronic, or substitute notice)? *
- Is credit monitoring / identity theft protection offered where required? *
Regulator & Third-Party Reporting
- Was the state attorney general or other regulator notified where required? *
- Were consumer reporting agencies notified when the affected count exceeds the statutory threshold? *
- Were data owners notified if the agency was acting as a data maintainer/processor? *
- Is documentation of the breach and response retained per statute? *
State Data Breach Notification Compliance Checklist 체크리스트 전체 다운로드
인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.