Walk It Through: The Breach Letter
Without unreasonable delay, the Consumer Protection Division every time, and where to learn more.
A letter arrives saying a hotel chain's reservation system was breached.
Two things a person in this spot might do. Picking one shows what the law says about it.
One breach letter from one hotel chain. What counts as personal information, the forms notice may take, and the exception for encrypted data are not worked through here.
A practice walkthrough, not a prediction of how any real one will go. Legal information, not legal advice.
Words this turns on
Terms with a legal meaning that is narrower than the everyday one. Each links to the definition and the authority behind it.
- Security breachWhat a business notifies each affected person of without unreasonable delay. Whenever affected persons are notified, the Consumer Protection Division of the Attorney General's Office is told too, with the nature of the breach and the number affected.
- Unfair and deceptive trade practicesUnfair methods of competition and unfair or deceptive acts in or affecting commerce, which are unlawful; a person injured gets judgment for treble the damages the verdict fixes.