N.M. Stat. § 57-12C-8
Exemptions.
The provisions of the Data Breach Notification Act shall not apply to a person subject
to the federal Gramm-Leach-Bliley Act or the federal Health Insurance Portability and
Accountability Act of 1996.
N.M. Stat. § 57-12C-8