The state of New Mexico has joined 47 other U.S. states in enacting a data breach notification law, after Gov. Susan Martinez signed the legislation earlier this month, BankInfoSecurity reports. Martinez signed the bill April 6, a little more than three weeks after the state legislature passed the measure. This leaves Alabama and South Dakota as the two remaining U.S. states without a data breach notification law. Attorney Jason Gavejian, CIPP/US, said the statute "follows the same general structure of many of the breach notification laws in other states," adding, "Importantly, the definition of personal identifying information under New Mexico's Data Breach Notification Act includes biometric data." 
Full Story