Data breach notification

Mississippi data breach notification law

Mississippi's breach notice rule was enacted by Laws 2010, House Bill 583, section 1.

This page was checked against that bill as sent to the Governor in the 2010 Regular Session, published on the Mississippi Legislature's site, because the current Mississippi Code is published only through a commercial host.

Any amendments made after 2010 are not reflected here.

What the bill covers

Personal information is an individual's first name or first initial and last name, combined with a Social Security number, a driver's license or state identification card number, or an account, credit or debit card number with any required code or password.

A breach under the bill is an unauthorized acquisition of personal information that has not been secured by encryption or by any other method or technology that renders it unreadable or unusable. Data secured that way sits outside the bill's definition of a breach.

Timing

The bill states that disclosure shall be made without unreasonable delay, subject to its listed exceptions. It gives no fixed count of days. A business reading the bill should look at those exceptions alongside the delay rule rather than treating the phrase in isolation.

Because this is the enacted bill rather than the current compiled code, check with an attorney whether later changes have altered the timing before relying on it for a live incident.

The no-harm exception and regulators

Notice is not required where the business determines that the breach will not likely result in harm to the affected individuals.

No regulator notice appears in the bill.

Where ShareAndGo fits

A full record of who opened which document is the natural starting point after an incident.

For documents you share through ShareAndGo, the activity log records every view and download, and watermarked view-only pages carry the reader's email address and the date.

On every data room the watermark is on by default and can be adjusted per room. Recipients confirm their email with a six-digit code, with no account required, and groups see only their folders. The chained log exports as CSV.

Mississippi questions

Why does this page cite a 2010 bill?
Because the current Mississippi Code is published only through a commercial host, the bill text on the Legislature's own site is the primary source used here.
How quickly must people be told?
Without unreasonable delay, under the bill's wording.
Is there a regulator notice?
No regulator notice appears in the bill.
Is encrypted data treated as breached?
No. The bill's breach definition covers data not secured by encryption or a similar method.
Which identity documents count?
A driver's license or state identification card number, when combined with a name.

Checked

Checked against Mississippi's 2010 H.B. 583, as sent to the Governor on November 2, 2026. This is general information, not legal advice.