# Missouri — US state data breach notification deadlines by state

For Missouri, statute citation is RSMo § 407.1500; individual notice deadline is without unreasonable delay; ag notice resident-count trigger is more than one thousand consumers; consumer reporting agency notice trigger (residents) is more than one thousand consumers; encryption safe harbor is yes, recorded from its source on 2026-08-18.

- **State:** Missouri _(verified: appears in the quote below)_
- **Statute citation:** RSMo § 407.1500
- **Individual notice deadline:** without unreasonable delay _(verified: appears in the quote below)_
- **AG notice resident-count trigger:** more than one thousand consumers
- **Consumer reporting agency notice trigger (residents):** more than one thousand consumers
- **Encryption safe harbor:** yes _(our reading, not quoted from the source)_
- **Notes:** AG notice and CRA notice are triggered simultaneously at the same threshold (more than 1,000 consumers). Financial institutions compliant with GLB Act, Federal Interagency Guidance, or NCUA 12 CFR Part 748 are deemed in compliance and effectively exempt from this section's requirements. _(our reading, not quoted from the source)_

## What the source says

> Missouri shall provide notice to the affected consumer that there has been a breach of security following discovery or notification of the breach. The disclosure notification shall be: (a) Made without unreasonable delay;

## Source

- https://revisor.mo.gov/main/OneSection.aspx?section=407.1500&bid=52524&hl=

Last verified: 2026-08-18. Review by: 2027-02-14.
Part of [US state data breach notification deadlines by state](https://referencesource.org/data-breach-notification-clocks/).