1. Except to the extent prohibited by law other than this chapter, the administrator or administrator's agent shall notify a holder as soon as practicable of: a. A suspected loss, misuse or unauthorized access, disclosure, modification, or destruction of confidential information obtained from the holder in the possession of the administrator or an administrator's agent; and b. Any interference with operations in any system hosting or housing confidential information which: (1) Compromises the security, confidentiality, or integrity of the information; or (2) Creates a substantial risk of identity fraud or theft. 2. Except as necessary to inform an insurer, attorney, investigator, or others as required by law, the administrator and an administrator's agent may not disclose, without the express consent in a record of the holder, an event described in subsection 1 to a person whose confidential information was supplied by the holder. 3. If an event described in subsection 1 occurs, the administrator and the administrator's agent shall:
a. Take action necessary for the holder to understand and minimize the effect of the event and determine its scope; and b. Cooperate with the holder with respect to: (1) Any notification required by law concerning a data or other security breach; and (2) A regulatory inquiry, litigation, or similar action.
47-30.2-74. (1503) Transitional provision - Effect of new provisions - Clarification of application. 1. This chapter does not relieve a holder of a duty that arose before July 1, 2021, to report, pay, or deliver property. A holder that fails to comply with the law in effect before July 1, 2021, is subject to the applicable enforcement and penalty provisions that existed before July 1, 2021, and the applicable provisions are continued in effect for the purpose of this subsection. 2. The initial report filed under this chapter for property that was not required to be reported before July 1, 2021, but which is subject to this chapter must include all items of property that would have been presumed abandoned during the ten-year period preceding July 1, 2021, as if this chapter had been in effect during that period.