How fast must I notify customers after a data breach in Washington? 

Within 30 calendar days of discovering the breach. If more than 500 Washington residents are affected, the Attorney General gets notice in the same window. Washington also allows a private lawsuit under the Consumer Protection Act, so the deadline carries real litigation exposure. 

By Heather

Heather focuses on small business insurance at Gild Insurance Agency, writing clear, practical guidance that helps business owners understand coverage, manage risk, and protect their businesses.