Organizations must investigate any suspected breach of security and must notify without delay any state residents who are likely to be harmed by a breach of security.

If a breach affects residents of other jurisdictions, those individuals must be notified based on the breach notification laws of the jurisdiction where they reside.

Organizations may be fined or penalized for Vendor violations. Failure to comply with consumer notification requirements constitutes an unfair trade practice and will be enforced by the Attorney General.

Mississippi passed the Insurance Data Security Law, which includes requirements for insurance licensees to protect personal information and investigate and respond to breaches of security. Licensees have until July 1, 2021, to comply with the vendor management requirements.

Mississippi establishes that breach of security applies mainly to personal information in computerized form.

Vendors must notify Organizations immediately after discovery of a breach or suspected breach. The Organization will be responsible to complete any required regulatory reporting and consumer notification.