Spotlight: Data breach disclosure not required in Arizona

Arizona is one of the few states that does not require a business to disclose data breaches to state officials, but that may change, according to Arizona Attorney General Mark Brnovich.

Brnovich believes that not requiring businesses to alert authorities of a data breach puts those affected at risk. Alerting the attorney general’s office of a breach would enable state officials to offer support to Arizona residents, and allow them to investigate the company to ensure they were properly protecting sensitive data.

Arizona law does require that a company alert individuals whose information was stolen, but only if the stolen data was unencrypted.