Extract to table

Each statute implicates a distinct set of compliance obligations, and the interplay among them creates a layered regulatory framework that the DPA must accommodate

The DPA must contractually impose Michigan ITPA-compliant security and breach notification obligations on Meridian

The DPA must include the full suite of service provider contractual provisions mandated by Cal

72 requires that a person or agency that owns or licenses data that includes personal identifying information of a Michigan resident must provide notice of a security breach to each Michigan resident whose personal identifying information was subject to unauthorized access and acquisition

The notice must be provided "without unreasonable delay

VMS must ensure that the security protections governing the data transfer are commensurate with the sensitivity of the data and the risk of unauthorized access