Skip to content
Network USA

MI · Breach notification statute

Michigan data breach notification law

A summary of the Michigan breach notification statute from the Privacy Rights Clearinghouse 2026 survey (laws as of 1 January 2026). This is not legal advice. Verify against the current statute and your state attorney general.

Summary

Statute citation

Mich. Comp. Laws §§ 445.61-445.79d (Identity Theft Protection Act) (Identity Theft Protection Act) (amended 2018)

Last amended
2018 (as stated in the citation)
Source
PRC Data Breach Notification Laws Survey 2026

Who must notify and when

Without unreasonable delay Michigan requires businesses and persons to notify affected individuals

Attorney general notice

No Michigan does not require notification to the Attorney General or any state agency for security

What counts as a breach

Not extracted in our PRC 2026 summary; check the statute.

What counts as personal information

In Michigan 'personal information' means the first name or first initial and last name linked to 1 or more of the following data elements of a resident of this state: (i) Social security number. (ii) Driver license number or state personal identification card number. (iii) Demand deposit or other financial account number, or credit card or debit card number, in combination with any required security code, access code, or password that would permit access to any of the resident's financial accoun

Coverage and remedies

Biometric dataNo
Medical informationNo
Government ID numbersNot extracted
Paper recordsNo
Private right of actionNo
Credit monitoring requiredNo

"Not extracted" means the field was not captured in our PRC 2026 summary; check the statute.

HIPAA breaches reported in Michigan

241 reports to HHS OCR affecting 16,131,814 individuals. Most common type: Hacking/IT Incident. See all HIPAA breaches in Michigan.

Five largest

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
Trinity HealthBusiness Associate3,320,726Sep 14, 2020Hacking/IT IncidentArchive (closed)
McLaren Health CareHealthcare Provider2,103,881Oct 20, 2023Hacking/IT IncidentArchive (closed)
Great Expressions Dental CentersHealthcare Provider1,925,397May 12, 2023Hacking/IT IncidentArchive (closed)
Wolverine Solutions GroupBusiness Associate1,024,731Dec 28, 2018Hacking/IT IncidentArchive (closed)
Wright & Filippis LLCHealthcare Provider877,584Nov 18, 2022Hacking/IT IncidentArchive (closed)

Frequently asked questions

When must Michigan businesses notify individuals of a data breach?

Our PRC 2026 extract summarises the Michigan timing rule as: "Without unreasonable delay Michigan requires businesses and persons to notify affected individuals". (Source: PRC 2026 survey extract.)

Does Michigan require notice to the attorney general?

The PRC 2026 extract notes: "No Michigan does not require notification to the Attorney General or any state agency for security". (Source: PRC 2026 survey extract.)

Does the Michigan law cover biometric data?

No. The PRC 2026 survey does not record biometric data as covered by the Michigan breach law.

Does the Michigan law cover medical information?

No. The PRC 2026 survey does not record medical information as covered by the Michigan breach law.

Does the Michigan law cover paper records?

No. The PRC 2026 survey records the Michigan law as covering computerised data only, not paper records.

Is there a private right of action in Michigan?

No. The PRC 2026 survey does not record a private right of action under the Michigan breach law.

Is credit monitoring required in Michigan?

No. The PRC 2026 survey does not record a credit monitoring requirement in Michigan.

How does the Michigan law relate to HIPAA?

HIPAA covered entities and business associates follow the federal HIPAA Breach Notification Rule for protected health information. State breach laws can apply alongside it, and some state statutes treat HIPAA compliance as satisfying state duties. Check the Michigan statute, and see our HIPAA vs state breach notification laws guide.

Sources