A person that discloses personal identifying information of a New Mexico resident pursuant to a contract with a service provider shall require by contract that the service provider implement and maintain reasonable security procedures and practices appropriate to the nature of the personal identifying information and to protect it from unauthorized access, destruction, use, modification or disclosure.
§ 57-12C-5 NMSA 1978
Service provider use of personal identifying information; implementation of security measures
Known as the Data Breach Notification Act
The act spans §§ 57–57 (12 sections).
Laws 2017, ch. 36, § 5.
Official source: NMOneSource (New Mexico Compilation Commission). Reproduced from public-domain New Mexico statutes; confirm against the official source for the current text. Not legal advice.