What is the data breach notification deadline in Guam?

Guam requires notice to affected individuals in the most expedient time possible and without unreasonable delay (9 Guam Code §§48.10–48.80).

Do you have to notify the Guam Attorney General of a data breach?

Guam does not require attorney-general notice for private-entity breaches.

← All jurisdictions

GU · data breach notification

Guam

med

9 Guam Code §§48.10–48.80

Individual deadline

No fixed limit

Trigger standard

Any breach

AG / regulator

Not required

Notice to individuals	in the most expedient time possible and without unreasonable delay
Risk-of-harm standard	None, notice required on any qualifying breach of covered personal information.
Encryption safe harbor	Yes, encrypted data (key not compromised) generally exempt.
Regulator notice	Not required for private-entity breaches.
Credit reporting agencies	No CRA-notice requirement.
Substitute notice	Available if cost exceeds $10,000 or more than 5,000 affected.
Private right of action	No, enforcement by the state.

Notes

※ AG exclusive enforcement; no AG or CRA notice requirement (statute-confirmed 2026-07-18)

Rule last verified July 18, 2026 · confidence med. This is a reference summary, not legal advice; verify against the current statute. How we compile this →

Is a Guam breach part of a multi-state incident?

See every jurisdiction at once, with letters and filing packets generated.

Run the calculator →