Compare tool
Compare state data breach notification laws
Choose up to six states. Fields come from the PRC 2026 survey extract; blanks show as not extracted.
| Field | West Virginia |
|---|---|
| Statute citation | W. Va. Code §§ 46A-2A-101 to -105 (Consumer Credit and Protection Act - Breach of Security of Consumer Information) (amended 2008) |
| Individual notice timing | Without unreasonable delay West Virginia requires businesses and individuals to notify affected |
| Attorney general notice | No West Virginia does not require notification to the Attorney General or any state agency for data |
| Biometric data | No |
| Medical information | No |
| Government ID numbers | Not extracted |
| Paper records | No |
| Private right of action | No |
| Credit monitoring required | No |
| Breach definition (excerpt) | Not extracted in our PRC 2026 summary; check the statute. |