Indiana Amends Timeline for Data Breach Notifications

Indiana recently amended its data breach notification law to require disclosure or notification of a breach of the security of data not later than 45 days of discovery of that breach.  This change is effective July 1, 2022.  The amendment did not change the requirement that disclosure or notification of such breach must be made without unreasonable delay.  Such disclosure or notification must still be made as soon as possible after the delay is no longer necessary to restore the integrity of the computer system or discover the scope of the breach, or the Indiana Attorney General or law enforcement agency notifies the person required to make this disclosure or notification that delay will no longer impede a criminal or civil investigation or jeopardize national security.