{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/us-breach-notification",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/us/agent/us-breach-notification)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-11-01",
    "fingerprint": "ewai:eu:5fa86e",
    "proof": "sha256:ab892e51de62e19fc61e992433e87377556da0556bab1c15abc1a93eb647d573",
    "jurisdiction": "eu"
  },
  "brand_source": "Source: NovaCopilot",
  "cagi_brand": "CAGI – Corporate Artificial General Intelligence",
  "cagi_version": "1.0",
  "cagi_relation": "alternate-entry",
  "canonical_agent": "/us/agent/us-breach-notification",
  "jurisdiction": "US NY",
  "agent_type": "deterministic",
  "cagi_entry": "https://legal.exploreworldai.com/us/ny/cagi-api/us-breach-notification",
  "canonical_agent_url": "https://legal.exploreworldai.com/us/agent/us-breach-notification",
  "id": "us-breach-notification",
  "script": {
    "kind": "operative",
    "fields": [
      {
        "name": "intrang",
        "kind": "boolean",
        "label": "Obehörig åtkomst till personuppgifter har skett",
        "labelEn": "Unauthorised access to personal data has occurred"
      },
      {
        "name": "boende_new_york",
        "kind": "boolean",
        "label": "Uppgifter om boende i New York berörs",
        "labelEn": "Data of New York residents is affected"
      },
      {
        "name": "antal_berorda",
        "kind": "number",
        "label": "Antal berörda personer",
        "labelEn": "Number of affected individuals"
      },
      {
        "name": "halsouppgifter",
        "kind": "boolean",
        "label": "Skyddad hälsoinformation (HIPAA) berörs",
        "labelEn": "Protected health information (HIPAA) is affected"
      }
    ],
    "rules": [
      {
        "id": "br-hipaa-500",
        "when": {
          "op": "all",
          "of": [
            {
              "op": "equals",
              "field": "intrang",
              "value": true
            },
            {
              "op": "equals",
              "field": "halsouppgifter",
              "value": true
            },
            {
              "op": "gte",
              "field": "antal_berorda",
              "value": 500
            }
          ]
        },
        "outcome": {
          "code": "br-hipaa-large",
          "verdict": "risk",
          "audit": "KRAV_GÄLLER",
          "title": "Anmälan till HHS, berörda och media inom 60 dagar",
          "titleEn": "Notice to HHS, individuals and media within 60 days",
          "obligation": "45 CFR 164.404 till 164.408 kräver underrättelse till berörda och till HHS utan onödigt dröjsmål och senast 60 dagar efter upptäckt, och till media när fler än 500 i en delstat berörs.",
          "obligationEn": "45 CFR 164.404 to 164.408 require notice to individuals and HHS without unreasonable delay and no later than 60 days after discovery, and to media when more than 500 residents of a state are affected.",
          "refs": [
            "breach"
          ]
        }
      },
      {
        "id": "br-ny",
        "when": {
          "op": "all",
          "of": [
            {
              "op": "equals",
              "field": "intrang",
              "value": true
            },
            {
              "op": "equals",
              "field": "boende_new_york",
              "value": true
            }
          ]
        },
        "outcome": {
          "code": "br-ny-notice",
          "verdict": "risk",
          "audit": "KRAV_GÄLLER",
          "title": "Anmälan till berörda och till New Yorks myndigheter",
          "titleEn": "Notice to residents and New York authorities",
          "obligation": "N.Y. Gen. Bus. Law § 899-aa kräver underrättelse till berörda boende i det mest skyndsamma förfarandet, och senast inom 30 dagar, samt till delstatens åklagare, Department of State och State Police. Fler än 5 000 berörda kräver även underrättelse till kreditupplysningsföretagen.",
          "obligationEn": "N.Y. Gen. Bus. Law § 899-aa requires notice to affected residents in the most expedient time possible and within 30 days, and to the Attorney General, Department of State and State Police. More than 5,000 affected residents also requires notice to consumer reporting agencies.",
          "refs": [
            "breach",
            "program"
          ]
        }
      },
      {
        "id": "br-hipaa",
        "when": {
          "op": "all",
          "of": [
            {
              "op": "equals",
              "field": "intrang",
              "value": true
            },
            {
              "op": "equals",
              "field": "halsouppgifter",
              "value": true
            }
          ]
        },
        "outcome": {
          "code": "br-hipaa-small",
          "verdict": "risk",
          "audit": "KRAV_GÄLLER",
          "title": "Anmälan till berörda inom 60 dagar och årlig rapport till HHS",
          "titleEn": "Notice to individuals within 60 days and annual log to HHS",
          "obligation": "Under 500 berörda: underrättelse till berörda inom 60 dagar och rapport till HHS senast 60 dagar efter kalenderårets slut (45 CFR 164.408(c)).",
          "obligationEn": "Fewer than 500 affected: notice to individuals within 60 days and a report to HHS within 60 days after the end of the calendar year (45 CFR 164.408(c)).",
          "refs": []
        }
      }
    ],
    "fallback": {
      "code": "out-of-scope",
      "verdict": "tillåtet",
      "audit": "UTANFÖR_TILLÄMPNING",
      "title": "Regeln ger inget krav på den indata som lämnats",
      "titleEn": "The rule yields no requirement for the facts supplied",
      "obligation": "Inget intrång i uppgifter om boende i New York eller i hälsoinformation är angivet. Övriga 48 delstater har egna anmälningslagar som inte prövas här.",
      "obligationEn": "No breach of New York resident data or health information is stated. The other 48 states have their own notification laws that are not tested here.",
      "refs": []
    }
  },
  "hash": "sha256:ab892e51de62e19fc61e992433e87377556da0556bab1c15abc1a93eb647d573",
  "version": "legal-2026-11-01",
  "expires": "2026-11-02T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-11-01+legal-2026-11-01+2026-11-01T13:13:06",
    "content_hash": "sha256:ab892e51de62e19fc61e992433e87377556da0556bab1c15abc1a93eb647d573",
    "revalidate_after": "2026-11-01T17:36:51.623Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/us/agent/us-breach-notification",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Källregister. Endast information, inte juridisk rådgivning och ingen bedömning av ett enskilt ärende.",
    "kinds": {
      "official_text": "Officiell källtext, ordagrann och ej tolkad",
      "summary": "Sammanfattning, ej juristgranskad. Läs alltid källtexten",
      "classification": "Automatisk märkning ur källans egen text, ej juristgranskad"
    },
    "rule": "Endast fält märkta official_text är lagens egen lydelse. Allt annat pekar på den.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}