← All jurisdictions
WY · data breach notification

Wyoming

med

Wyo. Stat. §§40-12-501, 502

Individual deadline
No fixed limit
Trigger standard
Risk of harm
AG / regulator
Not required
Notice to individualsin the most expedient time possible and without unreasonable delay
Risk-of-harm standardnotice where misuse has occurred or is reasonably likely
Encryption safe harborYes, encrypted data (key not compromised) generally exempt.
Regulator noticeNot required for private-entity breaches.
Credit reporting agenciesNo CRA-notice requirement.
Substitute noticeTypically available above $250,000 cost / 500,000 affected (verify).
Private right of actionNo, enforcement by the state.
Notable PI definitionsIncludes biometric, health insurance, credentials.

Rule last verified July 10, 2026 · confidence med. This is a reference summary, not legal advice; verify against the current statute. How we compile this →

Is a Wyoming breach part of a multi-state incident?

See every jurisdiction at once, with letters and filing packets generated.

Run the calculator →