§ 162. Definitions
Oklahoma Statutes AnnotatedTitle 24. Debtor and Creditor
24 Okl.St.Ann. § 162
§ 162. Definitions
As used in the Security Breach Notification Act:
1. “Breach of the security of a system” means the unauthorized access and acquisition of unencrypted and unredacted computerized data that compromises the security or confidentiality of personal information maintained by an individual or entity as part of a database of personal information regarding multiple individuals and that causes, or the individual or entity reasonably believes has caused or will cause, identity theft or other fraud to any resident of this state. Good faith acquisition of personal information by an employee or agent of an individual or entity for the purposes of the individual or the entity is not a breach of the security of the system, provided that the personal information is not used for a purpose other than a lawful purpose of the individual or entity or subject to further unauthorized disclosure;
2. “Entity” includes corporations, business trusts, estates, partnerships, limited partnerships, limited liability partnerships, limited liability companies, associations, organizations, joint ventures, governments, governmental subdivisions, agencies, or instrumentalities, or any other legal entity, whether for profit or not-for-profit;
3. “Encrypted” means transformation of data through the use of an algorithmic process into a form in which there is a low probability of assigning meaning without use of a confidential process or key, or securing the information by another method that renders the data elements unreadable or unusable;
The term does not include information that is lawfully obtained from publicly available information, or from federal, state or local government records lawfully made available to the general public;
d. substitute notice, if the individual or the entity required to provide notice demonstrates that the cost of providing notice will exceed Fifty Thousand Dollars ($50,000.00), or that the affected class of residents to be notified exceeds one hundred thousand (100,000) persons, or that the individual or the entity does not have sufficient contact information or consent to provide notice as described in subparagraph a, b or c of this paragraph. Substitute notice consists of any two of the following:
Laws 2008, c. 86, § 2, eff. Nov. 1, 2008.
24 Okl. St. Ann. § 162, OK ST T. 24 § 162
Current with legislation of the First Regular Session of the 59th Legislature (2023) and the First Extraordinary Session of the 59th Legislature (2023). Some sections may be more current, see credits for details.
|End of Document|