ShareAndGoShareAndGo

Data breach notification

North Dakota data breach notification law

North Dakota's Notice of Security Breach for Personal Information is chapter 51-30 of the Century Code.

It covers a wide range of data, and it leaves the business no harm-based way out.

A wide definition

Personal information is a first name or first initial and last name combined with a listed element, when the name and the data elements are not encrypted. North Dakota's elements reach beyond the usual identity and account numbers:

  • Social Security number.
  • Driver's license or non-driver photo identification number.
  • Account or card number with any required code or password.
  • Date of birth.
  • The maiden name of the individual's mother.
  • Medical information and health insurance information.
  • An employer-assigned identification number with any required code or password.
  • A digitized or other electronic signature.

Date of birth and a mother's maiden name show up in ordinary HR and onboarding files, which puts routine paperwork inside this chapter's reach.

Notice, without a harm test

Notice goes to any resident whose unencrypted personal information was, or is reasonably believed to have been, acquired by an unauthorized person. The disclosure must be made in the most expedient time possible and without unreasonable delay.

Chapter 51-30 contains no risk-of-harm exception; the trigger is acquisition of unencrypted personal information. No fixed number of days appears in the chapter as read.

The 250-person line

A business shall disclose to the attorney general by mail or electronic mail any breach of the security system which exceeds two hundred fifty individuals. Below that number, the chapter as read asks for resident notice only. Counting accurately therefore matters twice: once to address every affected resident, and again to know whether the Attorney General's copy is owed. A business that cannot tell whether it is at 240 or 260 people has a records problem before it has a legal one.

Where ShareAndGo fits

Signatures, birth dates and insurance details tend to travel as attachments to agreements.

For documents you share through ShareAndGo, the activity log records every view and download, and watermarked view-only pages carry the reader's email address and the date.

Each room's watermark setting begins switched on. Recipients confirm their email with a six-digit code and do not need an account, and groups open only their own folders. The chained log exports as CSV, so the count of people who opened a given file inside ShareAndGo can be read off rather than estimated.

North Dakota questions

Is there a risk-of-harm exception?
No. The chapter turns on acquisition of unencrypted personal information.
When does the Attorney General hear?
When a breach exceeds two hundred fifty individuals, by mail or electronic mail.
Are electronic signatures covered?
Yes. A digitized or other electronic signature is on the list.
Does encryption matter?
Yes. The definition applies when the name and the data elements are not encrypted.

Checked

Checked against North Dakota's published law on November 2, 2026. This is general information, not legal advice.

Related pages

Breach notification laws by state

Every jurisdiction's breach law.

Compare data rooms

How data rooms compare.

ShareAndGo home

ShareAndGo home.