Skip to content
Network USA

MS · Breach notification statute

Mississippi data breach notification law

A summary of the Mississippi breach notification statute from the Privacy Rights Clearinghouse 2026 survey (laws as of 1 January 2026). This is not legal advice. Verify against the current statute and your state attorney general.

Summary

Statute citation

Miss. Code Ann. § 75-24-29 (Consumer Protection - Security Breach Notification) (amended

Source
PRC Data Breach Notification Laws Survey 2026

Who must notify and when

Not applicable - government agencies not covered Mississippi's breach notification law applies only to

Attorney general notice

No Mississippi does not require notification to the Attorney General or any state agency. 44

What counts as a breach

In Mississippi 'breach of security' means unauthorized acquisition of electronic files, media, databases or computerized data containing personal information of any resident of this state when access to the personal information has not been secured by encryption or by any other method or technology that renders the personal information unreadable or unusable. 1

What counts as personal information

In Mississippi 'personal information' means an individual's first name or first initial and last name in combination with any one or more of the following data elements: (i) Social security number; (ii) Driver's license number, state identification card number or tribal identification card number; or (iii) An account number or credit or debit card number in combination with any required security code, access code or password that would permit access to an individual's financial account. Personal

Coverage and remedies

Biometric dataNo
Medical informationNo
Government ID numbersNot extracted
Paper recordsNo
Private right of actionNo
Credit monitoring requiredNo

"Not extracted" means the field was not captured in our PRC 2026 summary; check the statute.

HIPAA breaches reported in Mississippi

55 reports to HHS OCR affecting 2,459,630 individuals. Most common type: Hacking/IT Incident. See all HIPAA breaches in Mississippi.

Five largest

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
Singing River Health System and its wholly owned subsidiary, Singing River GulfportHealthcare Provider895,204Oct 18, 2023Hacking/IT IncidentArchive (closed)
Western Washington Medical GroupHealthcare Provider350,863Oct 26, 2023Hacking/IT IncidentArchive (closed)
Bienville Orthopaedic Specialists LLCHealthcare Provider242,986Sep 5, 2023Hacking/IT IncidentArchive (closed)
Delta Health SystemHealthcare Provider216,532Mar 29, 2024Hacking/IT IncidentArchive (closed)
HORNE, LLPBusiness Associate170,052Jan 13, 2024Hacking/IT IncidentArchive (closed)

Frequently asked questions

When must Mississippi businesses notify individuals of a data breach?

Our PRC 2026 extract summarises the Mississippi timing rule as: "Not applicable - government agencies not covered Mississippi's breach notification law applies only to". (Source: PRC 2026 survey extract.)

Does Mississippi require notice to the attorney general?

The PRC 2026 extract notes: "No Mississippi does not require notification to the Attorney General or any state agency. 44". (Source: PRC 2026 survey extract.)

Does the Mississippi law cover biometric data?

No. The PRC 2026 survey does not record biometric data as covered by the Mississippi breach law.

Does the Mississippi law cover medical information?

No. The PRC 2026 survey does not record medical information as covered by the Mississippi breach law.

Does the Mississippi law cover paper records?

No. The PRC 2026 survey records the Mississippi law as covering computerised data only, not paper records.

Is there a private right of action in Mississippi?

No. The PRC 2026 survey does not record a private right of action under the Mississippi breach law.

Is credit monitoring required in Mississippi?

No. The PRC 2026 survey does not record a credit monitoring requirement in Mississippi.

How does the Mississippi law relate to HIPAA?

HIPAA covered entities and business associates follow the federal HIPAA Breach Notification Rule for protected health information. State breach laws can apply alongside it, and some state statutes treat HIPAA compliance as satisfying state duties. Check the Mississippi statute, and see our HIPAA vs state breach notification laws guide.

Sources