Under most U.S. state data breach notification laws, notification obligations are triggered when:
-
A
Any employee accesses data outside normal hours
-
B
Personal information of state residents is compromised by unauthorized access or acquisition
-
C
A company experiences any cybersecurity incident regardless of data exposure
-
D
A federal agency independently discovers the breach