Skip to content
770-587-4595

Cyber Liability by state

Idaho data breach notification law and cyber insurance

Direct answer

What is Idaho's data breach notification law?

Idaho's breach notification law (Idaho Code sect. 28-51-104 et seq.) requires businesses to notify affected residents in the most expedient time possible and without unreasonable delay after a breach of personal information. Idaho requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, once the risk of misuse is established.

Reviewed by Cornerstone Staff28 years of financial services state licensing experienceLast verified July 29, 2026

What the statute requires

Idaho requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, once the risk of misuse is established. Cyber liability insurance generally funds the forensic investigation, notification, and legal review behind that analysis.

Consumer notification deadline
In the most expedient time possible and without unreasonable delay
Safe harbor
Notification is not required if the compromised data was encrypted, and disclosure is not required where an investigation determines misuse of the information is not reasonably likely.
Enforcement
The Attorney General may enforce violations, and the statute authorizes civil penalties for intentional failures to notify.

Statutes and sources

  • Idaho Identity Theft Data Breach Notification Law

    Idaho Code sect. 28-51-104 et seq.

Regulator: Idaho Attorney General . Last verified 2026-07-29 from the official source .

Related Idaho compliance pages

Insurance

Idaho workers' compensation

Licensing and bonds

Idaho licensing, bond, and regulator directory

Cyber Liability in other states

Back to the cyber liability coverage guide

Get Idaho coverage handled

Share a few details and an agent will respond within one business day.

Request a quote Talk to an agent