Compare tool
Compare state data breach notification laws
Choose up to six states. Fields come from the PRC 2026 survey extract; blanks show as not extracted.
| Field | North Dakota |
|---|---|
| Statute citation | N.D. Cent. Code §§ 51-30-01 to 51-30-07 (Notice of Security Breach for Personal Information) (amended 2015) |
| Individual notice timing | most expedient time possible and without unreasonable delay North Dakota requires persons |
| Attorney general notice | Yes North Dakota requires notification to the Attorney General by mail or email for breaches affecting |
| Biometric data | No |
| Medical information | Yes |
| Government ID numbers | Not extracted |
| Paper records | No |
| Private right of action | Yes |
| Credit monitoring required | No |
| Breach definition (excerpt) | In North Dakota 'breach of the security system' means unauthorized acquisition of computerized data when access to personal information has not been secured by encryption or by any other method or technology that renders the electronic files, media, or databases unreadable or unusable. Good-faith acquisition of personal information by an employee or agent of the person is not a breach of the security of the system, if the personal information is not used or subject to further unauthorized disclo |