What is the data breach notification deadline in North Dakota?

North Dakota requires notice to affected individuals in the most expedient time possible and without unreasonable delay (N.D. Cent. Code §§51-30-01–07).

Do you have to notify the North Dakota Attorney General of a data breach?

Yes. North Dakota Attorney General must be notified.

← All jurisdictions

ND · data breach notification

North Dakota

med

N.D. Cent. Code §§51-30-01–07

Individual deadline

No fixed limit

Trigger standard

Any breach

AG / regulator

Required

Notice to individuals	in the most expedient time possible and without unreasonable delay
Risk-of-harm standard	None, notice required on any qualifying breach of covered personal information.
Encryption safe harbor	Yes, encrypted data (key not compromised) generally exempt.
Regulator notice	North Dakota Attorney General, required above 250 residents; without unreasonable delay Written notice (mail/email) to AG
Credit reporting agencies	No CRA-notice requirement.
Substitute notice	Typically available above $250,000 cost / 500,000 affected (verify).
Private right of action	No, enforcement by the state.
Notable PI definitions	Includes dob, biometric.

Rule last verified July 10, 2026 · confidence med. This is a reference summary, not legal advice; verify against the current statute. How we compile this →

Is a North Dakota breach part of a multi-state incident?

See every jurisdiction at once, with letters and filing packets generated.

Run the calculator →