Home › State laws › Breach notification
BREACH NOTIFICATION
How fast must a company report a data breach?
All 50 states have a breach notification law, but deadlines and Attorney General triggers differ. This library profiles them state by state, starting with a pilot of two.
PILOT · 2 OF 19 STATESLAST VERIFIED · OCT 24 2026| State | Notice to individuals | Notice to Attorney General | Status |
|---|---|---|---|
| California | 30 calendar days | Sample copy within 15 calendar days of consumer notice (500+ residents) | Profiled |
| Texas | Up to 60 days (to re-check) | Within 30 days (250+ residents) | Profiled |
Research queue
Next in line, using the same profile format and primary sources:
ColoradoConnecticutDelawareIndianaIowaKentuckyMarylandMinnesotaMontanaNebraskaNew HampshireNew JerseyOregonRhode IslandTennesseeUtahVirginia
Why it matters: in a multi-state incident the shortest applicable deadline usually sets the pace. Background: Guide topic 06, Data Breaches & Cybersecurity.
Research and educational material only. Not legal advice. Time-sensitive legal requirements should be verified against current authoritative sources.