Certified Information Privacy Professional – United States (CIPP/US) — Question 100

Most states with data breach notification laws indicate that notice to affected individuals must be sent in the “most expeditious time possible without unreasonable delay.” By contrast, which of the following states currently imposes a definite limit for notification to affected individuals?

Answer options

• A. Maine
• B. Florida
• C. New York
• D. California

Correct answer: B

Explanation

Florida is the state that imposes a specific deadline for notifying affected individuals in the event of a data breach, differentiating it from most other states where there is no fixed time limit. Maine, New York, and California do not have definitive notification timeframes, instead emphasizing prompt notifications without unreasonable delays.