New Data Breach Notification Law in South Dakota

South Dakota Gov. Dennis Daugaard (R) has signed the state’s first data breach notification bill (S.B. 62), a measure that includes fines of up to $10,000 a day and takes effect July 1.

Signed March 21, the law requires data holders hit with a breach of personal information to notify affected consumers within 60 days, and to notify the state attorney general if more than 250 consumers are affected. Only 12 other states require notification within a defined time period.

A violation of the breach notification requirement is a deceptive act under the state’s consumer protection statutes, ...