Skip to content

The Letter About Your Information

Mo. Rev. Stat. § 407.1500 — without unreasonable delay, and the attorney general above one thousand

In Missouri, a person that must notify consumers of a breach of security of personal information does so without unreasonable delay, or after law enforcement says the notice will no longer impede its investigation.

Email
Who is toldWhen, as the section puts it
Who is toldEach affected consumerWhen, as the section puts itWithout unreasonable delay
Who is toldThe attorney general's office and the consumer reporting agencies, if more than one thousand consumers are notified at one timeWhen, as the section puts itWithout unreasonable delay
  • The attorney general has exclusive authority to sue for actual damages for a willful and knowing violation, and may seek a civil penalty of up to one hundred fifty thousand dollars per breach or series of similar breaches.

What counts as personal information, the forms notice may take, and the exceptions for encrypted data are in the section and are not reproduced in full here. Whether a notice was required or on time is a question for the attorney general, a court, and a licensed Missouri attorney.

Sources for this section (1)
  1. Mo. Rev. Stat. § 407.1500 — Breach of security of personal information

Legal information, not legal advice. Verified as of October 2026. Applying it to a particular situation is the work of a licensed Missouri attorney.

From here