A newly signed bill in New Mexico has introduced sweeping restrictions on the disclosure of sensitive personal information by state agency employees, in a move that is likely to have compliance implications for insurers, contractors, and government service providers. The “Nondisclosure of Sensitive Personal Information Act,” passed under Senate Bill 36 (SB 36), will take effect on July 1, 2025, and adds both civil penalties and criminal sanctions for improper handling of personal data.