On April 6, 2017, New Mexico became the 48th state to enact a data breach notification law; the Data Breach Notification Act (the “Act”) will go into effect on June 16, 2017.

The good news for many in the health care industry is the Act does not apply to those subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Financial institutions subject to the Gramm-Leach-Bliley Act are also exempt.