Cyber Liability by state
District of Columbia data breach notification law and cyber insurance
Direct answer
What is District of Columbia's data breach notification law?
District of Columbia's breach notification law (D.C. Code sect. 28-3851 et seq.) requires businesses to notify affected residents in the most expedient time possible and without unreasonable delay after a breach of personal information. The District of Columbia requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, with Attorney General notice above 50 residents and credit monitoring in certain cases.
What the statute requires
The District of Columbia requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, with Attorney General notice above 50 residents and credit monitoring in certain cases. Cyber liability insurance generally funds the forensics, notification, and legal review this statute requires.
- Consumer notification deadline
- In the most expedient time possible and without unreasonable delay
- Regulator notice
- Notify the District of Columbia Attorney General when a breach requires notice to more than 50 District residents.
- Credit bureau notice
- Notify consumer reporting agencies when a breach requires notice to more than 1,000 residents.
- Safe harbor
- Notification is not required if the compromised data was rendered secure through encryption or redaction and the key was not acquired.
- Enforcement
- Violations are enforceable by the Attorney General, and affected residents may bring a civil action to recover actual damages.
Statutes and sources
-
District of Columbia Consumer Security Breach Notification Act
D.C. Code sect. 28-3851 et seq.
Regulator: Office of the Attorney General for the District of Columbia . Last verified 2026-07-29 from the official source .
Related District of Columbia compliance pages
Cyber Liability in other states
- Alabama
- Alaska
- Arizona
- Arkansas
- California
- Colorado
- Connecticut
- Delaware
- Florida
- Georgia
- Hawaii
- Idaho
- Illinois
- Indiana
- Iowa
- Kansas
- Kentucky
- Louisiana
- Maine
- Maryland
- Massachusetts
- Michigan
- Minnesota
- Mississippi
- Missouri
- Montana
- Nebraska
- Nevada
- New Hampshire
- New Jersey
- New Mexico
- New York
- North Carolina
- North Dakota
- Ohio
- Oklahoma
- Oregon
- Pennsylvania
- Rhode Island
- South Carolina
- South Dakota
- Tennessee
- Texas
- Utah
- Vermont
- Virginia
- Washington
- West Virginia
- Wisconsin
- Wyoming
Get District of Columbia coverage handled
Share a few details and an agent will respond within one business day.