Processes personal data, in Wyoming

Wyo. Stat. Ann. sec. 40-12-502(f) · Read the law's page

• Expect the Wyoming Attorney General, not a private plaintiff, to be the one who may bring an action over a breach-notification violation under this statute.
• Comply with every other applicable provision of law in addition to the breach-notification section: Wyo. Stat. Ann. sec. 40-12-502(f) provides that the section is not exclusive and does not relieve an individual or commercial entity subject to it from compliance with other applicable law.

Wyo. Stat. Ann. secs. 9-21-201 and 9-21-202 · Read the law's page

• If you are a government entity of Wyoming, do not purchase, sell, trade or transfer personal data without the express written consent of the person the data references, except as the law expressly provides and as the section's exceptions allow (Wyo. Stat. Ann. sec. 9-21-202(a)).for a public body
• If you are a government entity of Wyoming and you transfer personal data to a nongovernment entity contracted to provide or assist with government services, include in the contract requirements for the protection of personal data consistent with the article (Wyo. Stat. Ann. sec. 9-21-202(a)(ii)).for a public body
• If you are a nongovernment entity contracted by a Wyoming government entity to provide or assist with government services, return or destroy the personal data once it is no longer necessary for the service, and do not maintain, sell, transfer, process or otherwise use it except as necessary to provide the contracted service (Wyo. Stat. Ann. sec. 9-21-202(a)(ii)).
• If you are a government entity of Wyoming, give a current or former Wyoming resident, or the resident's legally authorized representative, a copy of the resident's personal data you maintain on request; you may charge a fee consistent with the Wyoming Public Records Act (Wyo. Stat. Ann. sec. 9-21-202(b)).for a public body
• If you are a government entity of Wyoming that receives an objection to the accuracy, completeness, pertinence, timeliness, relevance, retention, dissemination or denial of access to a resident's own personal data, act on it within sixty days of receipt: verify the identity of the person who filed it, review its validity, alter, delete or grant access to the data if the objection is meritorious, otherwise offer to keep the resident's statement with the data, and notify the resident in writing of the decision (Wyo. Stat. Ann. sec. 9-21-202(c)).for a public body

Wyo. Stat. Ann. secs. 40-12-501 to 40-12-511 · Read the law's page

• Give notice as soon as possible to each affected Wyoming resident once your investigation determines misuse of their personal identifying information has occurred or is reasonably likely.
• Treat a biometric identifier used for authentication as personal identifying information here, whether or not it was derived from a photograph, video, or audio recording. No recording-derived exclusion exists in this cross-referenced definition.
• Use substitute notice only when direct notice would exceed the statute's cost or class-size thresholds, which differ for a Wyoming-based versus an out-of-state entity, or when you do not have sufficient contact information.