notified exceeds 175,000.
(C) The entity does not have sufficient contact
information.
(ii) Substitute notice shall consist of all of the
following:
(A) E-mail notice when the entity has an e-mail
address for the subject persons.
(B) Conspicuous posting of the notice on the
entity's publicly accessible Internet website if the
entity maintains one. The posting shall occur for a
minimum of 30 days and provide a link to the notice
on the home page of the website or on the first
significant page after entering the website.
(C) Notification to major Statewide media.
"Personal information." As follows:
(1) [An] The term includes an individual's first name
or first initial and last name in combination with and linked
to any one or more of the following data elements when the
data elements are not encrypted or redacted:
(i) Social Security number.
(ii) Driver's license number or a State
identification card number issued in lieu of a driver's
license.
(iii) Financial account number, credit or debit card
number, in combination with any required security code,
access code or password that would permit access to an
individual's financial account.
(1.1) The term also includes any of the following:
(i) Health insurance information.
(ii) Medical information.
20190SB0308PN0289 - 3 -
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30