Compare tool
Compare state data breach notification laws
Choose up to six states. Fields come from the PRC 2026 survey extract; blanks show as not extracted.
| Field | Montana |
|---|---|
| Statute citation | This state has 3 separate breach notification statutes: • Private Sector: Mont. Code Ann. §§ 30-14-1701, 30-14-1702, 30-14-1704 (Unfair Trade |
| Individual notice timing | Without unreasonable delay Montana requires businesses to notify affected individuals without |
| Attorney general notice | Yes Montana requires AG notification simultaneously with individual notification for all breaches across all |
| Biometric data | No |
| Medical information | Yes |
| Government ID numbers | Not extracted |
| Paper records | No |
| Private right of action | Yes |
| Credit monitoring required | No |
| Breach definition (excerpt) | In Montana 'breach of the security of the data system' means unauthorized acquisition of computerized data that materially compromises the security, confidentiality, or integrity of personal information maintained by the person or business and causes or is reasonably believed to cause loss or injury to a Montana resident. Good faith acquisition of personal information by an employee or agent for the purposes of the person or business is not a breach, provided that the personal information is not |