Notification of Risk to Personal Data Act

[AI summary unavailable — showing source text] Notification of Risk to Personal Data Act - Requires any agency or person that owns or licenses computerized data containing sensitive personal information to: (1) implement and maintain reasonable security and notification procedures and practices (appropriate to the size and nature of the agency or person and the nature of the information) to protect sensitive personal information from unauthorized access, destruction, use, modification, or disclosure; and (2) notify any individual whose sensitive personal information was compromised if such individual is known to be a U.S. resident (permits a federal law enforcement agency of domestic or foreign jurisdiction to delay notification if notification would impede a criminal or civil investigation). Requires any agency or person in possession of computerized data containing sensitive personal information that it does not own or license to notify the entity from whom it received the information if the security of that information was compromised, resulting in a significant risk of identity theft. Sets forth provisions regarding the timeliness of notification, the methods and contents of notice, and the duty to coordinate with consumer …