MS HB1204

Requires entities conducting business in Mississippi that experience a security breach affecting more than 100 residents to notify the Mississippi Attorney General in writing as expeditiously as possible and without unreasonable delay.

Written notice to the Attorney General must include a synopsis of the breach events, the approximate number of affected individuals in the state, any free services offered to individuals, and contact information for an employee or agent with additional information about the breach.

Entities must provide supplemental or updated notice to the Attorney General if they discover the initial written notice was materially incomplete or incorrect.

Information marked as confidential that the Attorney General receives under this section is exempt from disclosure under the Mississippi Public Records Act of 1983.

Failure to comply with the notification requirements constitutes an unfair trade practice enforceable by the Attorney General, but does not create a private right of action for individuals.