Compare tool
Compare state data breach notification laws
Choose up to six states. Fields come from the PRC 2026 survey extract; blanks show as not extracted.
| Field | Missouri |
|---|---|
| Statute citation | Mo. Rev. Stat. § 407.1500 (Merchandising Practices - Security Breach Notification) (amended |
| Individual notice timing | Without unreasonable delay Missouri requires businesses and persons to notify affected consumers |
| Attorney general notice | Yes Missouri requires Attorney General notification without unreasonable delay when a breach requires |
| Biometric data | No |
| Medical information | Yes |
| Government ID numbers | Not extracted |
| Paper records | No |
| Private right of action | No |
| Credit monitoring required | No |
| Breach definition (excerpt) | In Missouri 'breach of security' or 'breach' means unauthorized access to and unauthorized acquisition of personal information maintained in computerized form by a person that compromises the security, confidentiality, or integrity of the personal information. Good faith acquisition of personal information by a person or that person's employee or agent for a legitimate purpose of that person is not a breach of security, provided that the personal information is not used in violation of applicabl |