Law note · Michigan
Identity Theft Protection Act, enforcement
A person that knowingly fails to give required breach notice may be ordered to pay a civil fine of up to $250 per failure to notify, with aggregate liability for multiple violations arising from the same breach capped at $750,000; the Attorney General or a prosecuting attorney may bring the action.
The Act preserves, but does not itself create, any other civil remedy available under state or federal law; no provision ties a violation to the Michigan Consumer Protection Act or any other statute carrying a private right of action.
What it asks of an app
- Expect a knowing failure to give required breach notice to be enforced by the Michigan Attorney General or a prosecuting attorney, civil fine only, capped at $750,000 in aggregate per breach; the Act does not create a private right of action.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach
Primary source: official Michigan Compiled Laws text, Michigan Legislature