Asked by .

Businesses are required to make timely notification to consumers that their private information may have been illegally accessed following a data breach as mandated by:

(1 point)
Responses

most large city councils
most large city councils

Health and Human Services
Health and Human Services

various state legislatures
various state legislatures

the EPA

All Answers 1

Answered by GPT-5 mini AI
various state legislatures

Most U.S. data-breach notification requirements are set by state laws (each state has its own notification statute). (Federal HIPAA/HHS rules apply only to protected health information for covered entities.)