Montana data breach notification law

When a Montana incident counts

Not every intrusion is a breach under this section. The text we read defines a breach as one that materially compromises personal information and causes, or is reasonably believed to cause, loss or injury to a Montana resident.

Once that line is crossed, the business must disclose the breach to any resident of Montana whose unencrypted personal information was or is reasonably believed to have been acquired by an unauthorized person. The words that start the clock are discovery or notification of the breach.

Timing and the consumer protection office

Montana sets no fixed number of days in the text we read. The duty to send the consumer protection office its copy applies to any notice given under the section, so even a small incident produces a filing.

Where ShareAndGo fits

For documents you share through ShareAndGo, the activity log records every view and download, and watermarked view-only pages carry the reader's email address and the date.

Each data room has its own watermark setting, which is on by default. Recipients confirm their email with a six-digit code and need no account, so the names in the log are confirmed addresses rather than a forwarded link. Groups see only their own folders, which narrows the list of people who could have opened a given file. The log is chained and exports as CSV, so a Montana business answering who opened which file, and on what date, has a record to start from inside ShareAndGo.