Identity Theft Enforcement and Protection Act (breach notification and sensitive personal information protection)

Requires businesses to protect and properly destroy sensitive personal information and to notify affected individuals and, for breaches affecting 250 or more Texans, the attorney general. Notice to individuals is due within 60 days and to the attorney general within 30 days of determining that a breach occurred.