The Letter About Your Information
RCW 19.255.010 — no more than thirty calendar days, and the attorney general above five hundred
In Washington, notice to consumers affected by a breach is made in the most expedient time possible, without unreasonable delay, and no more than thirty calendar days after the breach was discovered, unless law enforcement asks for a delay or the delay is due to measures needed to determine the scope of the breach and restore the system.
| Who is told | When, as the section puts it |
|---|---|
| Who is toldEach affected consumer | When, as the section puts itNo more than thirty calendar days after discovery |
| Who is toldThe attorney general, if more than five hundred Washington residents are notified from a single breach | When, as the section puts itNo more than thirty days after discovery, updated if information is missing when it is due |
What counts as personal information, the forms notice may take, and the exceptions for encrypted data are in the section and are not reproduced in full here. Whether a notice was required or on time is a question for the attorney general, a court, and a licensed Washington attorney.
Sources for this section (1)
- RCW 19.255.010 — Disclosure, notice; definitions; rights, remedies
Legal information, not legal advice. Verified as of September 2026. Applying it to a particular situation is the work of a licensed Washington attorney.