House Bill: 732
Montana Code Annotated: § 30-14-1704
Effective Date: March 1, 2006
Definition of Personal Information: An individual’s first name or first initial and last name in combination with any one or more of the following data elements, when either the name or the data elements are not encrypted:
(a) Social security number;
(b) Driver's license number, Montana ID card number, or tribal ID card number;
(c) Account number or credit or debit card number in combination with any required security code, access code or password that would permit access to an individual’s financial account.
Summary: Any person or business that conducts business in Montana and that owns or licenses computerized data that includes personal information shall disclose any breach of the security of the data system following discovery or notification of the breach to any resident of Montana whose unencrypted personal information was or is reasonably believed to have been acquired by an unauthorized person. The disclosure must be made without unreasonable delay, consistent with the legitimate needs of law enforcement, or consistent with any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.
Visit the state Web site