Missouri data breach notification law and cyber insurance

What the statute requires

Missouri requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, with Attorney General notice above 1,000 residents. Cyber liability insurance typically covers the forensics, notification, and legal review this statute drives.

Consumer notification deadline

Without unreasonable delay

Regulator notice

Notify the Missouri Attorney General when a breach requires notice to more than 1,000 residents.

Credit bureau notice

Notify consumer reporting agencies when a breach requires notice to more than 1,000 residents.

Safe harbor

Notification is not required if the compromised data was encrypted or redacted, or where an investigation finds no reasonable likelihood of harm.

Enforcement

Violations are enforceable by the Attorney General, who may seek civil penalties for each violation subject to a statutory cap.

Statutes and sources

• Missouri Breach Notification Law

  Mo. Rev. Stat. sect. 407.1500

Regulator: Missouri Attorney General . Last verified 2026-07-29 from the official source .

Cyber Liability in other states

• Alabama
• Alaska
• Arizona
• Arkansas
• California
• Colorado
• Connecticut
• Delaware
• District of Columbia
• Florida
• Georgia
• Hawaii
• Idaho
• Illinois
• Indiana
• Iowa
• Kansas
• Kentucky
• Louisiana
• Maine
• Maryland
• Massachusetts
• Michigan
• Minnesota
• Mississippi
• Montana
• Nebraska
• Nevada
• New Hampshire
• New Jersey
• New Mexico
• New York
• North Carolina
• North Dakota
• Ohio
• Oklahoma
• Oregon
• Pennsylvania
• Rhode Island
• South Carolina
• South Dakota
• Tennessee
• Texas
• Utah
• Vermont
• Virginia
• Washington
• West Virginia
• Wisconsin
• Wyoming

Back to the cyber liability coverage guide