ShareAndGoShareAndGo

Data breach notification

Wyoming data breach notification law

Wyoming's computer security breach rules are Wyo. Stat. Ann. §§ 40-12-501 and 40-12-502.

They tie notice to an investigation, set no day count, and name the attorney general as enforcer rather than as a recipient of notice.

How the duty arises

Wyoming starts from a reasonable and prompt investigation.

"If the investigation determines that the misuse of personal identifying information about a Wyoming resident has occurred or is reasonably likely to occur, the individual or the commercial entity shall give notice as soon as possible to the affected Wyoming resident."

Where the investigation finds misuse neither occurred nor is reasonably likely, no notice is owed.

When notice is owed, "Notice shall be made in the most expedient time possible and without unreasonable delay".

Who enforces it

"The attorney general may bring an action in law or equity to address any violation of this section".

Section 40-12-502 as published names the attorney general only in that role. It contains no notice to the attorney general or another regulator.

Personal identifying information, and what this page leaves out

The definition is "the first name or first initial and last name of a person in combination with one (1) or more of the data elements specified in W.S. 6-3-901(b)(iii) through (xiv), when the data elements are not redacted."

Those data elements sit in a different title, W.S. 6-3-901, which was not read for this page, so they are not listed here.

The definition turns on redaction and does not mention encryption. Whether encrypted data is excused was not established, so this page says nothing more on it.

Where ShareAndGo fits

Casper and Cheyenne businesses that pass customer files to lenders, insurers or buyers can keep the exchange in one room where each group sees only its own folders.

For documents you share through ShareAndGo, the activity log records every view and download, and watermarked view-only pages carry the reader's email address and the date.

The watermark is a per-room setting, on by default. Recipients confirm a six-digit code sent to their email and need no account, and the chained activity log exports as CSV when a list of readers is needed.

Wyoming FAQ

Is there a deadline in days?
No. Notice is made in the most expedient time possible and without unreasonable delay.
Does the attorney general get notice of a breach?
Section 40-12-502 as published names the attorney general as the enforcer and contains no notice to it.
Does redacted data count?
No. The definition covers data elements that are not redacted.
What has to happen before residents are told?
An investigation must determine that misuse of personal identifying information about a Wyoming resident has occurred or is reasonably likely to occur.
Why are the data elements not listed here?
Wyoming defines them by cross-reference to W.S. 6-3-901(b)(iii) through (xiv), which this page did not read.

Checked against

Read from Title 40 on the Wyoming Legislature's site, published as a PDF compilation of the title.

Checked against Wyoming's published law on November 2, 2026. This is general information, not legal advice.

Continue

Breach notification laws by state

Breach notification law for each jurisdiction.

ShareAndGo vs DataRooms.com

ShareAndGo vs DataRooms.com.

ShareAndGo home

ShareAndGo home page.