As used in this part:

1. (1) "Breach of system security" means the same as that term is defined in Section 13-44-102.
2. (2) "NIST" means the National Institute for Standards and Technology in the United States Department of Commerce.
3. (3) "PCI data security standard" means the Payment Card Industry Data Security Standard.

4. (4)

   1. (a) "Person" means:

      1. (i) an individual;
      2. (ii) an association;
      3. (iii) a corporation;
      4. (iv) a joint stock company;
      5. (v) a partnership;
      6. (vi) a business trust; or
      7. (vii) any unincorporated organization.
   2. (b) "Person" includes a financial institution organized, chartered, or holding a license authorizing operation under the laws of this state, another state, or another country.
5. (5) "Personal information" means the same as that term is defined in Section 13-44-102.

Enacted by Chapter 40, 2021 General Session