State breach notification timelines reference

Published Jul 12, 2024 • Updated May 1, 2026

Overview

Breach laws are patchwork—counsel drives clock; you supply facts fast.

Internal triage template

Discovery date estimate, categories of data, resident states affected headcount, containment status.

Multi-state

Shortest clock may dominate—parallel workstreams legal notifications.

Documentation

Immutable timeline log entries who learned what when—privilege tagging if attorney-led.

Pitfalls

Announcing prematurely on social media—coordinate communications.

Annual refresh

Legal summary one-pager map updated as laws pass midsummer legislative churn.

Note

This article is not legal advice—stamp footer reminder in wiki.

Related Articles

EDR deployment checklist for new workstations

## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...

security-endpoint-protection msp +1

Handling Defender for Business false positives

## Overview False positives waste analyst time and train users to ignore alerts. This article stand...

security-endpoint-protection msp +1

Application allowlisting with Windows Defender ASR rules

## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...

security-endpoint-protection msp +1