An new Arizona law (formerly S.B. 1042) amends existing data security statutes to include breaches of data maintained by law enforcement agencies. Prior to S.B. 1042, which requires that businesses in the state conduct an investigation after a breach of data security and notify those customers affected by the incident, law enforcement agencies were not exempt. Under the new law, the state department of public safety, county sheriff’s offices, and municipal police departments must develop an information security policy that includes notification procedures in case of a data breach.