Skip to content
Network USA

WY · Breach notification statute

Wyoming data breach notification law

A summary of the Wyoming breach notification statute from the Privacy Rights Clearinghouse 2026 survey (laws as of 1 January 2026). This is not legal advice. Verify against the current statute and your state attorney general.

Summary

Statute citation

Wyo. Stat. Ann. §§ 40-12-501 to 40-12-509 (Computer Security Breach; Notice to Affected Persons) (amended 2015)

Last amended
2015 (as stated in the citation)
Source
PRC Data Breach Notification Laws Survey 2026

Who must notify and when

Not applicable - government agencies not covered Wyoming's notification requirements do not apply to

Attorney general notice

No Wyoming does not require notification to the Attorney General or any state agency for data

What counts as a breach

In Wyoming 'breach of the security of the data system' means unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal identifying information maintained by a person or business and causes or is reasonably believed to cause loss or injury to a resident of this state.1

What counts as personal information

Not extracted in our PRC 2026 summary; check the statute.

Coverage and remedies

Biometric dataYes
Medical informationYes
Government ID numbersNot extracted
Paper recordsNo
Private right of actionNo
Credit monitoring requiredNo

"Not extracted" means the field was not captured in our PRC 2026 summary; check the statute.

HIPAA breaches reported in Wyoming

19 reports to HHS OCR affecting 287,419 individuals. Most common type: Unauthorized Access/Disclosure. See all HIPAA breaches in Wyoming.

Five largest

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
Wyoming Department of HealthHealth Plan164,010Apr 29, 2021Unauthorized Access/DisclosureArchive (closed)
Cheyenne Regional Medical CenterHealthcare Provider17,549Dec 10, 2019Hacking/IT IncidentArchive (closed)
Community Action partnership of Natrona CountyHealthcare Provider15,000Apr 20, 2011TheftArchive (closed)
Cheyenne Radiology Group & MRI, P.C.Healthcare Provider12,222Feb 9, 2023Hacking/IT IncidentArchive (closed)
Wyoming Department of HealthHealth Plan11,935Dec 19, 2013Hacking/IT IncidentArchive (closed)

Frequently asked questions

When must Wyoming businesses notify individuals of a data breach?

Our PRC 2026 extract summarises the Wyoming timing rule as: "Not applicable - government agencies not covered Wyoming's notification requirements do not apply to". (Source: PRC 2026 survey extract.)

Does Wyoming require notice to the attorney general?

The PRC 2026 extract notes: "No Wyoming does not require notification to the Attorney General or any state agency for data". (Source: PRC 2026 survey extract.)

Does the Wyoming law cover biometric data?

Yes. The PRC 2026 survey records biometric data as covered by the Wyoming breach law.

Does the Wyoming law cover medical information?

Yes. The PRC 2026 survey records medical information as covered by the Wyoming breach law.

Does the Wyoming law cover paper records?

No. The PRC 2026 survey records the Wyoming law as covering computerised data only, not paper records.

Is there a private right of action in Wyoming?

No. The PRC 2026 survey does not record a private right of action under the Wyoming breach law.

Is credit monitoring required in Wyoming?

No. The PRC 2026 survey does not record a credit monitoring requirement in Wyoming.

How does the Wyoming law relate to HIPAA?

HIPAA covered entities and business associates follow the federal HIPAA Breach Notification Rule for protected health information. State breach laws can apply alongside it, and some state statutes treat HIPAA compliance as satisfying state duties. Check the Wyoming statute, and see our HIPAA vs state breach notification laws guide.

Sources