Breach notification deadlines vary by state. Florida’s FIPA requires 30 days — the strictest in the region. Alabama and Tennessee require 45 days. Louisiana requires 60 days. Mississippi, Georgia, and North Carolina use “reasonable time without unreasonable delay” standards. If the breach touches 1,000+ residents, you must also notify the credit bureaus. In most states the attorney general must be notified as well.
Each state’s guide walks through its specific statute: Florida (FIPA), Georgia, and Mississippi.
