U.S. State Breach Notification Laws Authoritative Source Content

Document created by Susan Read-Miller Employee on May 21, 2018Last modified by Susan Read-Miller Employee on May 20, 2019
Version 4Show Document
  • View in full screen mode

This authoritative source comprises the breach notification laws for the 50 U.S. States and territories.  Data Breach Laws are available as authoritative source content for the following laws:

  • AK 45.48:  Alaska State Breach Notification Law (AK 45.48.010 to .090)
  • AL SB318:  Alabama State Breach Notification Law (SB318)
  • AR 4-110:  Arkansas State Breach Notification Law (AR 4-110)
  • AZ 44-7501:  Arizona State Breach Notification Law (AZ 44-7501)
  • CASB-1386:  California State Breach Notification Law (CA SB 1386)
  • CO 6-1-716:  Colorado State Breach Notification Law (CO 6-1-716)
  • CT 36a-701b:  Connecticut State Breach Notification Law (CT 36a-701b)
  • DC 28-3852:  District of Columbia Breach Notification Law (DC 28-3852)
  • DE Chapter 12B:  Delaware State Breach Notification Law (DE Chapter 12B)
  • FL 817.5681:  Florida State Breach Notification Law (FL 817.568)
  • GA 10-1-912:  Georgia State Breach Notification Law (A 10-1-912)
  • GU 48: Guam Breach Notification Law (GU Chapter 48)
  • HI 487N:  Hawaii State Breach Notification Law (487N)
  • IA 715C:  Iowa State Breach Notification Law (IA 715C)
  • ID 28-51:  Idaho State Breach Notification Law (28-51)
  • IL CS530:  Illinois State Breach Notification Law (IL 815.530)
  • IN 4-1-11:  Indiana State Breach Notification Law (IN 4-1-11)
  • KS 50-7a:  Kansas State Breach Notification Law (KS 50-7a)
  • KY 365:  Kentucky State Breach Notification Law - Private (KY 365)
  • KY 61.933:  Kentucky State Breach Notification Law - Agency (KY 61.933)
  • LA RS 51:3071-77:  Louisiana State Breach Notification Law (LA RS 51:3071-77)
  • MA201-CMR1719:  Massachusetts State Breach Notification Law (MA 201 CMR 17)
  • MD 14-3501:  Maryland State Breach Notification Law (MD 14-3501)
  • ME 210-B:  Maine State Breach Notification Law (Chapter 210-B)
  • MI 445.72:  Michigan State Breach Notification Law (MI 445.72)
  • MN 325E.61:  Minnesota State Breach Notification Law - Personal Information (325E.61)
  • MN 325E.64:  Minnesota State Breach Notification Law - Transaction Data (325E.64)
  • MO 407.1500:  Missouri State Breach Notification Law (407.1500)
  • MS 75-24-29:  Mississippi State Breach Notification Law (75-24-29)
  • MT 2-16-15:  Montana State Breach Notification Law - Agencies (2-6-15)
  • MT 30-14-1704:  Montana State Breach Notification Law - Businesses (30-14-1704)
  • MT 33-19-321:  Montana State Breach Notification Law - Licensees (33-19-321)
  • NC 75-65:  North Carolina State Breach Notification Law (NC 75-65)
  • ND 51-30:  North Dakota State Breach Notification Law (ND Chapter 51-30)
  • NE 78-800: Nebraska State Breach Notification Law (NE 78-800)
  • NH 359-C: New Hampshire State Breach Notification Law (Sections 359-C:19 to 21)
  • NJ 56:8-163:  New Jersey State Breach Notification Law (NJ 56:8-163)
  • NM H.B. 15:  New Mexico State Breach Notification Law (H.B. 15)
  • NV Chapter 603A:  Nevada State Breach Notification Law (NV Chapter 603A)
  • NY 899-aa:  New York State Breach Notification Law (NY 899-aa)
  • OH 1347.12:  Ohio State Breach Notification Law - Agency (1347.12)
  • OH 1349.19:  Ohio State Breach Notification Law - Private (1349.19)
  • OK 24-161-166:  Oklahoma State Breach Notification Law - Private (OK 24-161-166)
  • OK 74-3113.1:  Oklahoma State Breach Notification Law - Agency (74-3113.1)
  • OR 646A.600:  Oregon State Breach Notification Law (646A.600 to 646A.628)
  • PN 73.43:  Pennsylvania State Breach Notification Law (PN 73.43)
  • PR 310:  Puerto Rico Breach Notification Law (Chapter 310, § 4051 to 4055)
  • RI 11-49.3:  Rhode Island State Breach Notification Law (RI 11-49.3)
  • SC 39-1-90:  South Carolina State Breach Notification Law (SC 39-1-90)
  • SD 22-40:  South Dakota State Breach Notification Law (SD Chapter 22-40)
  • TN 47-18-2107:  Tennessee State Breach Notification Law - Information Holders (47-18-2107)
  • TN 8-4-119:  Tennessee State Breach Notification Law - Agencies (8-4-119)
  • TX521.053:  Texas State Breach Notification Law (TX Sec. 521-053)
  • UT 13-44:  Utah State Breach Notification Law (13-44-101)
  • VA 18.2-186.6:  Virginia State Breach Notification Law (VA 18.2-186.6)
  • VI 2208:  Virgin Islands of the United States Breach Notification Law - Agencies (§ 2208)
  • VI 2209:  Virgin Islands of the United States Breach Notification Law - Businesses (§ 2209)
  • VT 2435:  Vermont State Breach Notification Law (§ 2430 and § 2435)
  • WA 19.255.010:  Washington State Breach Notification Law - Private (19.255.010)
  • WA 42.56.590:  Washington State Breach Notification Law - Agency (42.56.590)
  • WI 134.98:  Wisconsin State Breach Notification Law (134.98)
  • WV 46A-2A:  West Virginia State Breach Notification Law (46A-2A)
  • WY 40-12-502:  Wyoming State Breach Notification Law (WY 40-12-502)

 

Note, this authoritative source was formerly titled U.S. State Privacy Laws, but was renamed to better represent the content.

 

Updated: May 2019

 

Languages

This content is available in English only.

 

Mappings

Mappings for the U.S. State Breach Notification Laws to the RSA Archer Control Standard Library are available in the authoritative source content pack.


Licensing Restrictions

The U.S. State Breach Notification Laws authoritative source content is available with the use of the RSA Archer Policy Program Management, RSA Archer Controls Monitoring Program Management, and/or RSA Archer Authorization and Assessment use cases. No additional license is required.

 

For More Information

To learn more about the U.S State Breach Notification Laws Authoritative Source Content:

 

For Additional Support

To learn more about this content, please contact your Account Rep for additional details. For technical support questions, please open a support case or contact RSA Archer at archersupport@rsa.com for more information.

Attachments

    Outcomes