Requires all state entities, including local governments, to notify affected individuals in the event of a data breach where information is compromised; defines "cybersecurity incident".

Summary

If enacted, this bill would require all state entities, including local governments, lenders, banks, and other regulated entities, to notify affected individuals in the event of a data breach where personal information is compromised. It also formally defines a "cybersecurity incident," establishing clear triggers for notification obligations. Compliance officers must update incident response plans and notification procedures to align with these statutory requirements.