Managed IT and Cybersecurity in Wyoming

Wyo. Stat. §§ 40-12-501 and 40-12-502. Notice to affected people: in the most expedient time possible.

Wyoming's breach law is Wyo. Stat. §§ 40-12-501 and 40-12-502. A business that learns of a breach of computerized data holding personal identifying information of Wyoming residents must investigate promptly and in good faith. If misuse has occurred or is likely, it must notify affected residents in the most expedient time possible and without unreasonable delay. The statute sets no fixed number of days.

Since 2015 the notice must be clear and conspicuous. It must describe the types of information involved, give a general description of the incident and the approximate date, say in general terms what the business did to protect its systems, advise people to review account statements and credit reports, and say whether law enforcement delayed the notice. Wyoming does not require notice to a state regulator, and a business that follows HIPAA breach rules is treated as compliant.

This is a plain language summary for orientation, reviewed in October 2026. It is not legal advice. Ask counsel about your own facts.