hard
Single Answer
0Alekos's company recently experienced a significant data breach involving the personal data of many of their customers. The company operates only in the United States and has facilities in several different states. The personal information relates only to residents of the United States. Which breach laws should they review to ensure that they are taking appropriate action?
Answer Options
A
The breach laws in the state where they are headquartered along with federal breach laws
B
The breach laws of states they do business in or where their customers reside along with federal breach laws
C
Only federal breach laws
D
Breach laws only cover government agencies, not private businesses
Correct Answer: B
Explanation
In general, companies should be aware of the breach laws in any location where they do business. U.S. states have a diverse collection of breach laws and requirements, meaning that in this case, Alekos's company may need to review many different breach laws to determine which they may need to comply with if they conduct business in the state or with the state's residents.