What is the data breach notification deadline in U.S. Virgin Islands?

U.S. Virgin Islands requires notice to affected individuals in the most expedient time possible and without unreasonable delay (V.I. Code tit. 14 §2208 et seq.).

Do you have to notify the U.S. Virgin Islands Attorney General of a data breach?

U.S. Virgin Islands does not require attorney-general notice for private-entity breaches.

← All jurisdictions

VI · data breach notification

U.S. Virgin Islands

med

V.I. Code tit. 14 §2208 et seq.

Individual deadline

No fixed limit

Trigger standard

Any breach

AG / regulator

Not required

Notice to individuals	in the most expedient time possible and without unreasonable delay
Risk-of-harm standard	None, notice required on any qualifying breach of covered personal information.
Encryption safe harbor	Yes, encrypted data (key not compromised) generally exempt.
Regulator notice	Not required for private-entity breaches.
Credit reporting agencies	No CRA-notice requirement.
Substitute notice	Available if cost exceeds $100,000 or more than 50,000 affected.
Private right of action	Yes.

Notes

※ Statute-confirmed (2026-07-18): no AG or CRA notice required; injured customers may bring a civil action for damages

Rule last verified July 18, 2026 · confidence med. This is a reference summary, not legal advice; verify against the current statute. How we compile this →

Is a U.S. Virgin Islands breach part of a multi-state incident?

See every jurisdiction at once, with letters and filing packets generated.

Run the calculator →