Arizona
For Arizona, statute citation is A.R.S. § 18-552; individual notice deadline is within forty-five days after the determination; individual notice hard deadline (days) is 45; ag / regulator notice deadline is within forty-five days after the determination; ag notice resident-count trigger is more than one thousand individuals, recorded from its source on 2026-08-18.
- State
- Arizona verified
- Statute citation
- A.R.S. § 18-552
- Individual notice deadline
- within forty-five days after the determination verified
- Individual notice hard deadline (days)
- 45 our reading
- AG / regulator notice deadline
- within forty-five days after the determination verified
- AG notice resident-count trigger
- more than one thousand individuals verified
- Consumer reporting agency notice trigger (residents)
- more than one thousand individuals verified
- Encryption safe harbor
- yes our reading
- Notes
- GLBA-covered entities and HIPAA covered entities and business associates are exempt (subsection N). AG notice and notice to the three largest nationwide consumer reporting agencies are both required at the same threshold: more than one thousand individuals affected. Notice to both the attorney general and the Director of the Arizona Department of Homeland Security is required. our reading
Values marked our reading are our classification of what the source says — the source does not print them in those words. The quote below is the evidence for each one; judge it yourself.
What the source says
B. If the investigation results in a determination that there has been a security system breach, the person that owns or licenses the computerized data, within forty-five days after the determination, shall: 1. Notify the individuals affected pursuant to subsection E of this section and subject to the needs of law enforcement as provided in subsection D of this section. 2. If the breach requires notification of more than one thousand individuals, notify both: (a) The three largest nationwide consumer reporting agencies. (b) The attorney general and the director of the Arizona department of homeland security, in writing, in a form prescribed by rule or order of the attorney general or the director of the Arizona department of homeland security or by providing the attorney general or the director of the Arizona department of homeland security with a copy of the notification provided pursuant to paragraph 1 of this subsection.
— azleg.gov, retrieved 2026-08-18
Source
- azleg.govhttps://www.azleg.gov/ars/18/00552.htm