57-12C-9: Delayed notification.

The notification required by the Data Breach Notification Act may be delayed:

A. if a law enforcement agency determines that the notification will impede a criminal investigation; or

B. as necessary to determine the scope of the security breach and restore the integrity, security and confidentiality of the data system.