ND HB1435

Expands the definition of "personal identifying information" under identity theft law to include health insurance policy numbers, subscriber identification numbers, and any unique health insurer identifiers used to identify an individual.

Adds medical information and health insurance information as protected data elements in the definition of "personal information" for data breach notification purposes.

Clarifies that medical information includes any information regarding an individual's medical history, mental or physical condition, or medical treatment or diagnosis by a health care professional.

Allows covered entities, business associates, or subcontractors subject to federal breach notification requirements under 45 CFR Part 164, Subpart D to be deemed in compliance with North Dakota's breach notification requirements.

Maintains existing penalties for identity theft: class B felony if value exceeds $1,000, class C felony otherwise, and class A felony for second or subsequent offenses, with a six-year statute of limitations.