New Mexico is on the cusp of becoming the 48th state to enact a data breach notification law. Alabama and South Dakota are the only states without such a law. The measure would require organizations to notify the state attorney general if more than 1,000 New Mexicans fell victim to a breach. Unlike Massachusetts’ law, the New Mexico measure is not prescriptive, giving much latitude to businesses to decide how best to protect PII. A national law would simplify reporting breaches to law enforcement, citizens and consumers.”]
Source: https://www.cuinfosecurity.com/new-mexico-set-to-be-48th-state-breach-notification-law-a-9783