ANALYSIS: Data Breach in Maine? Clock’s Ticking Faster

Maine is the latest jurisdiction to add precision to the “without unreasonable delay” standard commonly found in state breach notification statutes. According to a new law signed by Gov. Janet Mills on June 28, notices must be sent no more than 30 days after becoming aware of a security breach. When the law enters into force in September, Maine will join 18 other states that have—or will soon have—specific timelines for notifying affected individuals.

Maine currently requires that notices be made “as expediently as possible and without unreasonable delay,” 10 Me. Rev. Stat. § 1348, but the new law ...