Indiana Code 27-2-27-5. “Cybersecurity event”
Current as of: 2024 | Check for updates
|
Other versions
Sec. 5. As used in this chapter, “cybersecurity event” means an event resulting in unauthorized access to or a disruption or misuse of an information system or nonpublic information stored on the information system that has a reasonable likelihood of materially harming a consumer or any material part of the normal operations of the licensee. However, the term does not include the following:
(2) An event in which a licensee has determined that the nonpublic information accessed by an unauthorized person has not been used or released and has been returned or destroyed.
(1) The unauthorized acquisition of encrypted nonpublic information if the encryption, process, or key is not also acquired, released, or used without authorization.
Terms Used In Indiana Code 27-2-27-5
- consumer: means a resident of Indiana whose nonpublic information is in a licensee's possession, custody, or control. See Indiana Code 27-2-27-4
- encrypted: means the transformation of data into a form that results in a low probability of assigning meaning without the use of a protective process or key. See Indiana Code 27-2-27-7
- information system: means either of the following:
Indiana Code 27-2-27-9
- licensee: means a person that is:
Indiana Code 27-2-27-10
- nonpublic information: means electronic information that is not publicly available information and is described in either of the following subdivisions:
Indiana Code 27-2-27-12
As added by P.L.130-2020, SEC.10.