The notification must include:
- The nature of the breach
- The number of residents affected by the breach
- Any steps the agency has taken or plans to take relating to the incident
- How to obtain a police report
- Instructions for requesting a credit freeze
Notifications can be written or distributed electronically. The only time a notification can be delayed is when a law enforcement agency determines that the notification will impede a criminal investigation.