# US breach notification triage
> Source: https://legalcode.md/skills/legalcode-us-breach-notification-triage | [HTML version](https://legalcode.md/skills/legalcode-us-breach-notification-triage)

Multi-state US breach notification triage covering all 50 states, DC, Puerto Rico, Guam, US Virgin Islands, and American Samoa.

Multi-state US breach notification triage covering all 50 states, DC, Puerto Rico, Guam, US Virgin Islands, and American Samoa. Use when a security incident involves personal information of US residents and you need to determine notification obligations: which states require notice, to whom, by when, with what content, and whether any safe harbor (encryption, good-faith acquisition, HIPAA compliance) applies. Covers the full triage lifecycle — PI definition matching, breach definition analysis, clock-start normalization, notification deadline calculation, AG filing thresholds, notice content requirements, substitute notice triggers, credit monitoring obligations, and federal overlay requirements (HIPAA Breach Notification Rule, GLBA Safeguards Rule, SEC Form 8-K Item 1.05, FCC telecom rules, CIRCIA). Produces a prioritized notification timeline with per-state checklists, template notice letters, AG filing guidance, and a Glass Box audit trail. Integrates with legalcode-breach-severity-assessment for upstream harm triage.

This skill performs multi-state US breach notification triage for legal, privacy, and incident-response teams. It determines which US jurisdictions require notice, to whom, by when, with what content, and whether any safe harbor or exemption applies. **Covers:** - Per-jurisdiction applicability (all 50 states + DC + Puerto Rico + Guam + US Virgin Islands + American Samoa) - Personal information (PI) definition matching per state - Breach definition analysis (unauthorized access vs. unauthorized acquisition) - Clock-start normalization (discovery vs. awareness vs. determination) - Notification deadline calculation (calendar vs. business days; ASAP vs. set timeframe) - AG filing thresholds and content requirements - Safe harbor analysis (encryption, good-faith acquisition, risk of no harm) - Substitute notice triggers and requirements - Credit monitoring obligations - Federal overlay: HIPAA, GLBA Safeguards Rule, SEC Form 8-K, FCC telecom, CIRCIA - Notification timeline priority sequencing (strictest clock first) - Per-state notice content checklists - Template individual notice and AG filing letters **Does not:** - Perform forensic root-cause analysis or determine whether a breach actually occurred - Resolve GDPR, UK GDPR, or non-US breach notification obligations (see `legalcode-breach-severity-assessment` for global triage) - Provide legal advice or replace qualified counsel - Promise regulatory outcome or guarantee AG ...

## Jurisdictions

Global



---
*Legalcode -- legalcode.md*