Skip to content

Cyber Liability by state

North Dakota data breach notification law and cyber insurance

Direct answer

What is North Dakota's data breach notification law?

North Dakota's breach notification law (N.D. Cent. Code sect. 51-30-01 et seq.) requires businesses to notify affected residents in the most expedient time possible and without unreasonable delay after a breach of personal information. North Dakota requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, with Attorney General notice above 250 residents.

Reviewed by Cornerstone Staff28 years of financial services state licensing experienceLast verified July 29, 2026

What the statute requires

North Dakota requires businesses to notify affected residents of breaches of unencrypted personal information without unreasonable delay, with Attorney General notice above 250 residents. Cyber liability insurance typically covers the forensics, notification, and legal review this statute drives.

Consumer notification deadline
In the most expedient time possible and without unreasonable delay
Regulator notice
Notify the North Dakota Attorney General when a breach affects more than 250 residents.
Safe harbor
Notification is not required if the compromised data was encrypted and the encryption key was not acquired.
Enforcement
Violations are enforceable by the Attorney General, who may seek civil penalties and injunctive relief.

Statutes and sources

  • North Dakota Notice of Security Breach for Personal Information Law

    N.D. Cent. Code sect. 51-30-01 et seq.

Regulator: North Dakota Attorney General . Last verified 2026-07-29 from the official source .

Get North Dakota coverage handled

Share a few details and an agent will respond within one business day.