Breach notification
Disclosure of Breach of Security (Identity Theft and Privacy Protection)
14 V.I.C. §§ 2208-22092019 U.S. Virgin Islands Code, Title 14, Chapter 110, Subchapter I, Section 2209, reproduced by Justia (archived copy)
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived August 10, 2024. Publisher's page: https://law.justia.com/codes/virgin-islands/2019/title-14/chapter-110/subchapter-i/2209/In force. Binds public and private bodies.
What this law does
Any person or business that conducts business in the Virgin Islands and owns or licenses computerized personal information must disclose a breach of security to an affected territory resident without unreasonable delay following discovery, and Section 2208 imposes the identical duty on a Virgin Islands government agency.
Covered personal information is a resident's first name or initial and last name combined with an unencrypted Social Security number, driver's license number, or financial account, credit, or debit card number together with any required access code, and excludes information lawfully made available to the public through government records.
Where direct notice would cost more than $100,000, would reach more than 50,000 residents, or the covered entity lacks sufficient contact information, substitute notice by email, a conspicuous website posting, and notice to major territory-wide media satisfies the duty.
What it requires