Skip to content
770-587-4595

Cyber Liability by state

Michigan data breach notification law and cyber insurance

Direct answer

What is Michigan's data breach notification law?

Michigan's breach notification law (Mich. Comp. Laws sect. 445.72) requires businesses to notify affected residents without unreasonable delay after a breach of personal information. Michigan requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, once harm becomes likely.

Reviewed by Cornerstone Staff28 years of financial services state licensing experienceLast verified July 29, 2026

What the statute requires

Michigan requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, once harm becomes likely. Cyber liability insurance generally funds the forensics, notification, and legal review behind that analysis.

Consumer notification deadline
Without unreasonable delay
Credit bureau notice
Notify consumer reporting agencies when a breach requires notice to more than 1,000 residents.
Safe harbor
Notification is not required if the compromised data was encrypted, or where an investigation finds the breach is not likely to cause harm.
Enforcement
The statute authorizes civil penalties for failure to notify, subject to an aggregate cap per breach.

Statutes and sources

  • Michigan Identity Theft Protection Act

    Mich. Comp. Laws sect. 445.72

Regulator: Michigan Attorney General . Last verified 2026-07-29 from the official source .

Related Michigan compliance pages

Insurance

Michigan workers' compensation

Licensing and bonds

Michigan licensing, bond, and regulator directory

Cyber Liability in other states

Back to the cyber liability coverage guide

Get Michigan coverage handled

Share a few details and an agent will respond within one business day.

Request a quote Talk to an agent