State Data Breach Law Reference Links
◈ Links to our Analysis Pages
◈ Links to the Best Reference Guides
◈ Links to State Statutes, Portals, DBs
◈ State Statute Scoring
Unique data. Hand-curated.
State Data Breach Notification Laws: Resources & Analysis
State Data Breach Law: Reference Links
| State Breach Statute | Abbr | PPlan Rank | Privacy Plan | Perkins Coie | CSR Privacy | DWT | Lewis | Baker | Mintz | Reporting Portal | DB of Breaches | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Alabama | AL | 23 | http://alisondb.legislature.state.al.us/alison/CodeOfAlabama/1975/8-38-2.htm | PPlan | https://privacyplan.net/state-data-breach-law/alabama.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-alabama.html | CSR | https://csrcyberprivacy.com/privacy-regulations/alabama | DWT | https://www.dwt.com/gcp/states/alabama/ | Lewis | https://lewisbrisbois.com/privacy/US/Alabama/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=AL | Mintz | https://www.mintz.com/mintz-matrix/Alabama | Portal | https://my.alabamaag.gov/ | ||
| Alaska | AK | 33 | http://law.alaska.gov/department/civil/consumer/4548.html | PPlan | https://privacyplan.net/state-data-breach-law/alaska.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-alaska.html | CSR | https://csrcyberprivacy.com/privacy-regulations/alaska | DWT | https://www.dwt.com/gcp/states/alaska/ | Lewis | https://lewisbrisbois.com/privacy/US/Alaska/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=AK | Mintz | https://www.mintz.com/mintz-matrix/Alaska | ||||
| Arizona | AZ | 39 | https://www.azleg.gov/viewdocument/?docName=https://www.azleg.gov/ars/18/00551.htm | PPlan | https://privacyplan.net/state-data-breach-law/arizona.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-arizona.html | CSR | https://csrcyberprivacy.com/privacy-regulations/arizona | DWT | https://www.dwt.com/gcp/states/arizona/ | Lewis | https://lewisbrisbois.com/privacy/US/Arizona/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=AZ | Mintz | https://www.mintz.com/mintz-matrix/Arizona | Portal | https://www.azag.gov/consumer/data-breach/notification-form-business | ||
| Arkansas | AR | 26 | https://law.justia.com/codes/arkansas/2010/title-4/subtitle-7/chapter-110/4-110-105/ | PPlan | https://privacyplan.net/state-data-breach-law/arkansas.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-arkansas.html | CSR | https://csrcyberprivacy.com/privacy-regulations/arkansas | DWT | https://www.dwt.com/gcp/states/arkansas/ | Lewis | https://lewisbrisbois.com/privacy/US/Arkansas/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=AR | Mintz | https://www.mintz.com/mintz-matrix/Arkansas | Portal | https://www.arkansasag.gov/consumer-protection/ | ||
| California | CA | 1 | http://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.29 | PPlan | https://privacyplan.net/state-data-breach-law/california.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-california.html | CSR | https://csrcyberprivacy.com/privacy-regulations/california | DWT | https://www.dwt.com/gcp/states/california/ | Lewis | https://lewisbrisbois.com/privacy/US/California/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=CA | Mintz | https://www.mintz.com/mintz-matrix/California | Portal | https://oag.ca.gov/privacy/databreach/report-a-breach | Database | https://oag.ca.gov/privacy/databreach/list |
| Colorado | CO | 5 | https://codes.findlaw.com/co/title-6-consumer-and-commercial-affairs/co-rev-st-sect-6-1-716.html | PPlan | https://privacyplan.net/state-data-breach-law/colorado.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-colorado.html | CSR | https://csrcyberprivacy.com/privacy-regulations/colorado | DWT | https://www.dwt.com/gcp/states/colorado/ | Lewis | https://lewisbrisbois.com/privacy/US/Colorado/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=CO | Mintz | https://www.mintz.com/mintz-matrix/Colorado | Portal | databreach@coag.gov | ||
| Connecticut | CT | 19 | https://www.cga.ct.gov/current/pub/chap_669.htm#sec_36a-701b | PPlan | https://privacyplan.net/state-data-breach-law/connecticut.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-connecticut.html | CSR | https://csrcyberprivacy.com/privacy-regulations/connecticut | DWT | https://www.dwt.com/gcp/states/connecticut/ | Lewis | https://lewisbrisbois.com/privacy/US/Connecticut/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=CT | Mintz | https://www.mintz.com/mintz-matrix/Connecticut | Portal | https://portal.ct.gov/AG/General/Report-a-Breach-of-Security-Involving-Computerized-Data | ||
| Delaware | DE | 27 | http://delcode.delaware.gov/title6/c012b/index.shtml | PPlan | https://privacyplan.net/state-data-breach-law/delaware.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-delaware.html | CSR | https://csrcyberprivacy.com/privacy-regulations/delaware | DWT | https://www.dwt.com/gcp/states/delaware/ | Lewis | https://lewisbrisbois.com/privacy/US/Delaware/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=DE | Mintz | https://www.mintz.com/mintz-matrix/Delaware | Portal | https://attorneygeneral.delaware.gov/fraud/cpu/securitybreachnotification/form/ | Database | https://attorneygeneral.delaware.gov/fraud/cpu/securitybreachnotification/ |
| District of Columbia | DC | 2 | https://code.dccouncil.us/dc/council/code/titles/28/chapters/38/subchapters/II/ | PPlan | https://privacyplan.net/state-data-breach-law/district-of-columbia.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-district-of-columbia.html | CSR | https://csrcyberprivacy.com/privacy-regulations/washington-d-c/ | DWT | https://www.dwt.com/gcp/states/district-of-columbia/ | Lewis | https://lewisbrisbois.com/privacy/US/District%20of%20Columbia/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=DC | Mintz | https://www.mintz.com/mintz-matrix/washington-dc | Portal | https://oag.dc.gov/requirements-districts-data-breach-notification | ||
| Florida | FL | 9 | http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&Search_String=&URL=0500-0599/0501/Sections/0501.171.html | PPlan | https://privacyplan.net/state-data-breach-law/florida.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-florida.html | CSR | https://csrcyberprivacy.com/privacy-regulations/florida | DWT | https://www.dwt.com/gcp/states/florida/ | Lewis | https://lewisbrisbois.com/privacy/US/Florida/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=FL | Mintz | https://www.mintz.com/mintz-matrix/Florida | Portal | http://myfloridalegal.com/contact.nsf/contact?Open&Section=Citizen_Services | ||
| Georgia | GA | 34 | https://codes.findlaw.com/ga/title-10-commerce-and-trade/ga-code-sect-10-1-910.html | PPlan | https://privacyplan.net/state-data-breach-law/georgia.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-georgia.html | CSR | https://csrcyberprivacy.com/privacy-regulations/georgia | DWT | https://www.dwt.com/gcp/states/georgia/ | Lewis | https://lewisbrisbois.com/privacy/US/Georgia/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=GA | Mintz | https://www.mintz.com/mintz-matrix/Georgia | ||||
| Guam | GU | 52 | http://www.guamcourts.org/CompilerofLaws/GCA/09gca/9gc048.pdf | PPlan | https://privacyplan.net/state-data-breach-law/guam.htm | DWT | https://www.dwt.com/gcp/states/guam/ | Lewis | https://lewisbrisbois.com/privacy/US/Guam/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=GU | ||||||||||
| Hawaii | HI | 11 | https://www.capitol.hawaii.gov/hrscurrent/Vol11_Ch0476-0490/HRS0487N/HRS_0487N-0002.htm | PPlan | https://privacyplan.net/state-data-breach-law/hawaii.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-hawaii.html | CSR | https://csrcyberprivacy.com/privacy-regulations/hawaii | DWT | https://www.dwt.com/gcp/states/hawaii/ | Lewis | https://lewisbrisbois.com/privacy/US/Hawaii/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=HI | Mintz | https://www.mintz.com/mintz-matrix/Hawaii | Portal | https://ag.hawaii.gov/contact-us/email-the-department-of-ag/ | Database | http://cca.hawaii.gov/ocp/security-breach-notices/ |
| Idaho | ID | 51 | https://legislature.idaho.gov/statutesrules/idstat/Title28/T28CH51/SECT28-51-105/ | PPlan | https://privacyplan.net/state-data-breach-law/idaho.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-idaho.html | CSR | https://csrcyberprivacy.com/privacy-regulations/idaho | DWT | https://www.dwt.com/gcp/states/idaho/ | Lewis | https://lewisbrisbois.com/privacy/US/Idaho/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=ID | Mintz | https://www.mintz.com/mintz-matrix/Idaho | ||||
| Illinois | IL | 7 | http://www.ilga.gov/legislation/ilcs/ilcs3.asp?ActID=2702&ChapAct=815%C2%A0ILCS%C2%A0530/&ChapterID=67&ChapterName=BUSINESS+TRANSACTIONS&ActName=Personal+Information+Protection+Act. | PPlan | https://privacyplan.net/state-data-breach-law/illinois.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-illinois.html | CSR | https://csrcyberprivacy.com/privacy-regulations/illinois | DWT | https://www.dwt.com/gcp/states/illinois/ | Lewis | https://lewisbrisbois.com/privacy/US/Illinois/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=IL | Mintz | https://www.mintz.com/mintz-matrix/Illinois | Portal | http://www.illinoisattorneygeneral.gov/about/email_ag.jsp | ||
| Indiana | IN | 41 | http://iga.in.gov/legislative/laws/2020/ic/titles/004#4-1-11 | PPlan | https://privacyplan.net/state-data-breach-law/indiana.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-indiana.html | CSR | https://csrcyberprivacy.com/privacy-regulations/indiana | DWT | https://www.dwt.com/gcp/states/indiana/ | Lewis | https://lewisbrisbois.com/privacy/US/Indiana/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=IN | Mintz | https://www.mintz.com/mintz-matrix/Indiana | Portal | https://www.in.gov/attorneygeneral/files/Indiana%20Data%20Breach%20Notification%20Form.pdf | Database | https://www.in.gov/attorneygeneral/2874.htm |
| Iowa | IA | 38 | https://www.legis.iowa.gov/docs/code/715c.pdf | PPlan | https://privacyplan.net/state-data-breach-law/iowa.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-iowa.html | CSR | https://csrcyberprivacy.com/privacy-regulations/iowa | DWT | https://www.dwt.com/gcp/states/iowa/ | Lewis | https://lewisbrisbois.com/privacy/US/Iowa/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=IA | Mintz | https://www.mintz.com/mintz-matrix/Iowa | Portal | consumer@ag.iowa.gov | Database | https://www.iowaattorneygeneral.gov/for-consumers/security-breach-notifications/ |
| Kansas | KS | 49 | http://www.kslegislature.org/li_2014/b2013_14/statute/050_000_0000_chapter/050_007a_0000_article/ | PPlan | https://privacyplan.net/state-data-breach-law/kansas.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-kansas.html | CSR | https://csrcyberprivacy.com/privacy-regulations/kansas | DWT | https://www.dwt.com/gcp/states/kansas/ | Lewis | https://lewisbrisbois.com/privacy/US/Kansas/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=KS | Mintz | https://www.mintz.com/mintz-matrix/Kansas | ||||
| Kentucky | KY | 40 | https://codes.findlaw.com/ky/title-xxix-commerce-and-trade/ky-rev-st-sect-365-732.html | PPlan | https://privacyplan.net/state-data-breach-law/kentucky.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-kentucky.html | CSR | https://csrcyberprivacy.com/privacy-regulations/kentucky | DWT | https://www.dwt.com/gcp/states/kentucky/ | Lewis | https://lewisbrisbois.com/privacy/US/Kentucky/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=KY | Mintz | https://www.mintz.com/mintz-matrix/Kentucky | ||||
| Louisiana | LA | 12 | PPlan | https://privacyplan.net/state-data-breach-law/louisiana.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-louisiana.html | CSR | https://csrcyberprivacy.com/privacy-regulations/louisiana | DWT | https://www.dwt.com/gcp/states/louisiana/ | Lewis | https://lewisbrisbois.com/privacy/US/Louisiana/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=LA | Mintz | https://www.mintz.com/mintz-matrix/Louisiana | Portal | http://www.ag.state.la.us/Article/9707 | |||
| Maine | ME | 36 | http://legislature.maine.gov/statutes/10/title10ch210-Bsec0.html | PPlan | https://privacyplan.net/state-data-breach-law/maine.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-maine.html | CSR | https://csrcyberprivacy.com/privacy-regulations/maine | DWT | https://www.dwt.com/gcp/states/maine/ | Lewis | https://lewisbrisbois.com/privacy/US/Maine/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=ME | Mintz | https://www.mintz.com/mintz-matrix/Maine | Database | https://www.maine.gov/ag/consumer/identity_theft/index.shtml | ||
| Maryland | MD | 4 | https://codes.findlaw.com/md/commercial-law/md-code-com-law-sect-14-3501.html | PPlan | https://privacyplan.net/state-data-breach-law/maryland.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-maryland.html | CSR | https://csrcyberprivacy.com/privacy-regulations/maryland | DWT | https://www.dwt.com/gcp/states/maryland/ | Lewis | https://lewisbrisbois.com/privacy/US/Maryland/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=MD | Mintz | https://www.mintz.com/mintz-matrix/Maryland | Portal | idtheft@oag.state.md.us | Database | http://www.marylandattorneygeneral.gov/Pages/IdentityTheft/breachnotices.aspx |
| Massachusetts | MA | 8 | https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXV/Chapter93H/Section1 | PPlan | https://privacyplan.net/state-data-breach-law/massachusetts.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-massachusetts.html | CSR | https://csrcyberprivacy.com/privacy-regulations/massachusetts | DWT | https://www.dwt.com/gcp/states/massachusetts/ | Lewis | https://lewisbrisbois.com/privacy/US/Massachusetts/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=MA | Mintz | https://www.mintz.com/mintz-matrix/Massachusetts | Portal | https://www.mass.gov/forms/data-breach-notification-submission | Database | https://www.mass.gov/lists/data-breach-notification-reports |
| Michigan | MI | 42 | https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXV/Chapter93H/Section1 | PPlan | https://privacyplan.net/state-data-breach-law/michigan.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-michigan.html | CSR | https://csrcyberprivacy.com/privacy-regulations/michigan | DWT | https://www.dwt.com/gcp/states/michigan/ | Lewis | https://lewisbrisbois.com/privacy/US/Michigan/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=MI | Mintz | https://www.mintz.com/mintz-matrix/Michigan | ||||
| Minnesota | MN | 16 | PPlan | https://privacyplan.net/state-data-breach-law/minnesota.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-minnesota.html | CSR | https://csrcyberprivacy.com/privacy-regulations/minnesota | DWT | https://www.dwt.com/gcp/states/minnesota/ | Lewis | https://lewisbrisbois.com/privacy/US/Minnesota/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=MN | Mintz | https://www.mintz.com/mintz-matrix/Minnesota | |||||
| Mississippi | MS | 50 | https://advance.lexis.com/documentpage/?pdmfid=1000516&crid=44f0d968-6ef3-4aef-a2db-7ec4c9f0e2c7&nodeid=ABNAAWAABAAQ&nodepath=%2FROOT%2FABN%2FABNAAW%2FABNAAWAAB%2FABNAAWAABAAQ&level=4&haschildren=&populated=false&title=%C2%A7+75-24-29.+Persons+conducting+business+in+Mississippi+required+to+provide+notice+of+a+breach+of+security+involving+personal+information+to+all+affected+individuals%3B+enforcement.&config=00JABhZDIzMTViZS04NjcxLTQ1MDItOTllOS03MDg0ZTQxYzU4ZTQKAFBvZENhdGFsb2f8inKxYiqNVSihJeNKRlUp&pddocfullpath=%2Fshared%2Fdocument%2Fstatutes-legislation%2Furn%3AcontentItem%3A8P6B-8782-8T6X-74VC-00008-00&ecomp=k5v8kkk&prid=9be20549-c96b-46a9-b338-d9943601c47d | PPlan | https://privacyplan.net/state-data-breach-law/mississippi.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-mississippi.html | CSR | https://csrcyberprivacy.com/privacy-regulations/mississippi | DWT | https://www.dwt.com/gcp/states/mississippi/ | Lewis | https://lewisbrisbois.com/privacy/US/Mississippi/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=MS | Mintz | https://www.mintz.com/mintz-matrix/Mississippi | ||||
| Missouri | MO | 45 | https://revisor.mo.gov/main/OneSection.aspx?section=407.1500&bid=23329&hl= | PPlan | https://privacyplan.net/state-data-breach-law/missouri.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-missouri.html | CSR | https://csrcyberprivacy.com/privacy-regulations/missouri | DWT | https://www.dwt.com/gcp/states/missouri/ | Lewis | https://lewisbrisbois.com/privacy/US/Missouri/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=MO | Mintz | https://www.mintz.com/mintz-matrix/Missouri | Portal | consumer.help@ago.mo.gov | ||
| Montana | MT | 30 | https://leg.mt.gov/bills/mca_toc/30_14_17.htm | PPlan | https://privacyplan.net/state-data-breach-law/montana.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-montana.html | CSR | https://csrcyberprivacy.com/privacy-regulations/montana | DWT | https://www.dwt.com/gcp/states/montana/ | Lewis | https://lewisbrisbois.com/privacy/US/Montana/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=MT | Mintz | https://www.mintz.com/mintz-matrix/Montana | Portal | https://dojmt.gov/consumer/data-breaches-businesses/ | Database | https://dojmt.gov/consumer/databreach/ |
| Nebraska | NE | 35 | https://nebraskalegislature.gov/laws/statutes.php?statute=87-802 | PPlan | https://privacyplan.net/state-data-breach-law/nebraska.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-nebraska.html | CSR | https://csrcyberprivacy.com/privacy-regulations/nebraska | DWT | https://www.dwt.com/gcp/states/nebraska/ | Lewis | https://lewisbrisbois.com/privacy/US/Nebraska/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=NE | Mintz | https://www.mintz.com/mintz-matrix/Nebraska | Portal | https://protectthegoodlife.nebraska.gov/data-breach-notification | ||
| Nevada | NV | 17 | https://www.leg.state.nv.us/nrs/nrs-603a.html | PPlan | https://privacyplan.net/state-data-breach-law/nevada.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-nevada.html | CSR | https://csrcyberprivacy.com/privacy-regulations/nevada | DWT | https://www.dwt.com/gcp/states/nevada/ | Lewis | https://lewisbrisbois.com/privacy/US/Nevada/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=NV | Mintz | https://www.mintz.com/mintz-matrix/Nevada | ||||
| New Hampshire | NH | 21 | PPlan | https://privacyplan.net/state-data-breach-law/new-hampshire.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-new-hampshire.html | CSR | https://csrcyberprivacy.com/privacy-regulations/new-hampshire | DWT | https://www.dwt.com/gcp/states/new-hampshire/ | Lewis | https://lewisbrisbois.com/privacy/US/New%20Hampshire/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=NH | Mintz | https://www.mintz.com/mintz-matrix/New-Hampshire | Database | https://www.doj.nh.gov/consumer/security-breaches/index.htm | |||
| New Jersey | NJ | 22 | https://codes.findlaw.com/nj/title-56-trade-names-trademarks-and-unfair-trade-practices/nj-st-sect-56-8-162.html | PPlan | https://privacyplan.net/state-data-breach-law/new-jersey.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-new-jersey.html | CSR | https://csrcyberprivacy.com/privacy-regulations/new-jersey | DWT | https://www.dwt.com/gcp/states/new-jersey/ | Lewis | https://lewisbrisbois.com/privacy/US/New%20Jersey/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=NJ | Mintz | https://www.mintz.com/mintz-matrix/New-Jersey | Portal | https://www.njconsumeraffairs.gov/ocp/Pages/cyberfraud.aspx | Database | https://www.cyber.nj.gov/data-breach-alerts |
| New Mexico | NM | 43 | https://nmlegis.gov/Sessions/17%20Regular/final/HB0015.pdf | PPlan | https://privacyplan.net/state-data-breach-law/new-mexico.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-new-mexico.html | CSR | https://csrcyberprivacy.com/privacy-regulations/new-mexico | DWT | https://www.dwt.com/gcp/states/new-mexico/ | Lewis | https://lewisbrisbois.com/privacy/US/New%20Mexico/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=NM | Mintz | https://www.mintz.com/mintz-matrix/New-Mexico | Portal | https://www.nmag.gov/file-a-complaint.aspx | ||
| New York | NY | 31 | https://www.nysenate.gov/legislation/laws/GBS/899-AA | PPlan | https://privacyplan.net/state-data-breach-law/new-york.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-new-york.html | CSR | https://csrcyberprivacy.com/privacy-regulations/new-york | DWT | https://www.dwt.com/gcp/states/new-york/ | Lewis | https://lewisbrisbois.com/privacy/US/New%20York/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=NY | Mintz | https://www.mintz.com/mintz-matrix/New-York | Portal | https://formsnym.ag.ny.gov/OAGOnlineSubmissionForm/faces/OAGSBHome | ||
| North Carolina | NC | 6 | https://codes.findlaw.com/nc/chapter-75-monopolies-trusts-and-consumer-protection/nc-gen-st-sect-75-65.html | PPlan | https://privacyplan.net/state-data-breach-law/north-carolina.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-north-carolina.html | CSR | https://csrcyberprivacy.com/privacy-regulations/north-carolina | DWT | https://www.dwt.com/gcp/states/north-carolina/ | Lewis | https://lewisbrisbois.com/privacy/US/North%20Carolina/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=NC | Mintz | https://www.mintz.com/mintz-matrix/North-Carolina | Portal | https://ncdoj.gov/protecting-consumers/protecting-your-identity/protect-your-business-from-id-theft/security-breach-information/ | ||
| North Dakota | ND | 10 | https://codes.findlaw.com/nd/title-51-sales-and-exchanges/nd-cent-code-sect-51-30-02.html | PPlan | https://privacyplan.net/state-data-breach-law/north-dakota.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-north-dakota.html | CSR | https://csrcyberprivacy.com/privacy-regulations/north-dakota | DWT | https://www.dwt.com/gcp/states/north-dakota/ | Lewis | https://lewisbrisbois.com/privacy/US/North%20Dakota/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=ND | Mintz | https://www.mintz.com/mintz-matrix/North-Dakota | Portal | https://attorneygeneral.nd.gov/consumer-resources/data-breach-notices | Database | https://attorneygeneral.nd.gov/consumer-resources/data-breach-notices |
| Ohio | OH | 47 | https://codes.ohio.gov/ohio-revised-code/section-1349.19 | PPlan | https://privacyplan.net/state-data-breach-law/ohio.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-ohio.html | CSR | https://csrcyberprivacy.com/privacy-regulations/ohio | DWT | https://www.dwt.com/gcp/states/ohio/ | Lewis | https://lewisbrisbois.com/privacy/US/Ohio/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=OH | Mintz | https://www.mintz.com/mintz-matrix/Ohio | ||||
| Oklahoma | OK | 53 | https://www.bakerlaw.com/webfiles/Privacy/Map/State-Data-Breach-Statute/Oklahoma.pdf | PPlan | https://privacyplan.net/state-data-breach-law/oklahoma.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-oklahoma.html | CSR | https://csrcyberprivacy.com/privacy-regulations/oklahoma | DWT | https://www.dwt.com/gcp/states/oklahoma/ | Lewis | https://lewisbrisbois.com/privacy/US/Oklahoma/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=OK | Mintz | https://www.mintz.com/mintz-matrix/Oklahoma | Database | https://cybersecurity.ok.gov/breaches | ||
| Oregon | OR | 13 | https://www.oregonlaws.org/ors/646A.604 | PPlan | https://privacyplan.net/state-data-breach-law/oregon.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-oregon.html | CSR | https://csrcyberprivacy.com/privacy-regulations/oregon | DWT | https://www.dwt.com/gcp/states/oregon/ | Lewis | https://lewisbrisbois.com/privacy/US/Oregon/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=OR | Mintz | https://www.mintz.com/mintz-matrix/Oregon | Portal | https://justice.oregon.gov/consumer/DataBreach/Home/Submit | Database | https://justice.oregon.gov/consumer/DataBreach/ |
| Pennsylvania | PA | 46 | https://govt.westlaw.com/pac/Document/N5406B1B08C5311DA943797541B5FDE35?viewType=FullText&originationContext=documenttoc&transitionType=CategoryPageItem&contextData=(sc.Default)&bhcp=1 | PPlan | https://privacyplan.net/state-data-breach-law/pennsylvania.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-pennsylvania.html | CSR | https://csrcyberprivacy.com/privacy-regulations/pennsylvania | DWT | https://www.dwt.com/gcp/states/pennsylvania/ | Lewis | https://lewisbrisbois.com/privacy/US/Pennsylvania/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=PA | Mintz | https://www.mintz.com/mintz-matrix/Pennsylvania | ||||
| Puerto Rico | PR | 15 | https://advance.lexis.com/documentpage/?pdmfid=1000516&crid=3dae5e3e-ddd2-49bf-8535-aadcdeb8fb71&nodeid=AAMAADABGAAB&nodepath=%2FROOT%2FAAM%2FAAMAAD%2FAAMAADABG%2FAAMAADABGAAB&level=4&haschildren=&populated=false&title=%C2%A7+4051.+Definitions&config=00JABkODU1MGI4OC1hMmRkLTQ2MGYtOGY1NS03YjVjOWM4YjJlZjAKAFBvZENhdGFsb2d0HiKld62itjBDGzN8H7lV&pddocfullpath=%2Fshared%2Fdocument%2Fstatutes-legislation%2Furn%3AcontentItem%3A5D6S-8B41-66SD-80SR-00008-00&ecomp=k5v8kkk&prid=80ede612-e1e6-4866-a3e4-ff35f4f52440 | PPlan | https://privacyplan.net/state-data-breach-law/puerto-rico.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-puerto-rico.html | CSR | DWT | https://www.dwt.com/gcp/states/puerto-rico/ | Lewis | https://lewisbrisbois.com/privacy/US/Puerto%20Rico/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=PR | Mintz | https://www.mintz.com/mintz-matrix/Puerto-Rico | |||||
| Rhode Island | RI | 20 | http://webserver.rilin.state.ri.us/Statutes/TITLE11/11-49.3/11-49.3-4.HTM | PPlan | https://privacyplan.net/state-data-breach-law/rhode-island.htm | Perkins | https://www.perkinscoie.com/en/news-insights/rhode-island.html | CSR | https://csrcyberprivacy.com/privacy-regulations/rhode-island | DWT | https://www.dwt.com/gcp/states/rhode-island/ | Lewis | https://lewisbrisbois.com/privacy/US/Rhode%20Island/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=RI | Mintz | https://www.mintz.com/mintz-matrix/Rhode-Island | Portal | https://riag.wufoo.com/forms/q1851amb1bdd4d5/ | ||
| South Carolina | SC | 18 | https://www.scstatehouse.gov/query.php?search=DOC&searchtext=SECTION%2039%201%2090&category=CODEOFLAWS&conid=36689925&result_pos=0&keyval=17283&numrows=10 | PPlan | https://privacyplan.net/state-data-breach-law/south-carolina.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-south-carolina.html | CSR | https://csrcyberprivacy.com/privacy-regulations/south-carolina | DWT | https://www.dwt.com/gcp/states/south-carolina/ | Lewis | https://lewisbrisbois.com/privacy/US/South%20Carolina/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=SC | Mintz | https://www.mintz.com/mintz-matrix/South-Carolina | Portal | https://www.consumer.sc.gov/about-us/contact-us | Database | https://consumer.sc.gov/identity-theft-unit/security-breaches |
| South Dakota | SD | 24 | https://sdlegislature.gov/Statutes/Codified_Laws/2047702 | PPlan | https://privacyplan.net/state-data-breach-law/south-dakota.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-south-dakota.html | CSR | https://csrcyberprivacy.com/privacy-regulations/south-dakota | DWT | https://www.dwt.com/gcp/states/south-dakota/ | Lewis | https://lewisbrisbois.com/privacy/US/South%20Dakota/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=SD | Mintz | https://www.mintz.com/mintz-matrix/South-Dakota | Portal | consumerhelp@state.sd.us | ||
| Tennessee | TN | 29 | https://advance.lexis.com/documentpage/?pdmfid=1000516&crid=ae167118-3d03-4a8c-af3c-83c6191bfd5e&nodeid=ABVAAUAAVAAH&nodepath=%2FROOT%2FABV%2FABVAAU%2FABVAAUAAV%2FABVAAUAAVAAH&level=4&haschildren=&populated=false&title=47-18-2107.+Release+of+personal+consumer+information.&config=025054JABlOTJjNmIyNi0wYjI0LTRjZGEtYWE5ZC0zNGFhOWNhMjFlNDgKAFBvZENhdGFsb2cDFQ14bX2GfyBTaI9WcPX5&pddocfullpath=%2Fshared%2Fdocument%2Fstatutes-legislation%2Furn%3AcontentItem%3A4X8K-XB40-R03J-K1K5-00008-00&ecomp=f38_kkk&prid=1ebbe805-18ab-4aae-92e0-ec985d915ffa | PPlan | https://privacyplan.net/state-data-breach-law/tennessee.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-tennessee.html | CSR | https://csrcyberprivacy.com/privacy-regulations/tennessee | DWT | https://www.dwt.com/gcp/states/tennessee/ | Lewis | https://lewisbrisbois.com/privacy/US/Tennessee/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=TN | Mintz | https://www.mintz.com/mintz-matrix/Tennessee | ||||
| Texas | TX | 14 | https://statutes.capitol.texas.gov/Docs/BC/htm/BC.521.htm#521.002 | PPlan | https://privacyplan.net/state-data-breach-law/texas.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-texas.html | CSR | https://csrcyberprivacy.com/privacy-regulations/texas | DWT | https://www.dwt.com/gcp/states/texas/ | Lewis | https://lewisbrisbois.com/privacy/US/Texas/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=TX | Mintz | https://www.mintz.com/mintz-matrix/Texas | Portal | https://oagtx.force.com/datasecuritybreachreport/s/ | Database | https://oagtx.force.com/datasecuritybreachreport/apex/DataSecurityReportsPage |
| Utah | UT | 54 | https://le.utah.gov/xcode/Title13/Chapter44/C13-44_1800010118000101.pdf | PPlan | https://privacyplan.net/state-data-breach-law/utah.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-utah.html | CSR | https://csrcyberprivacy.com/privacy-regulations/utah | DWT | https://www.dwt.com/gcp/states/utah/ | Lewis | https://lewisbrisbois.com/privacy/US/Utah/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=UT | Mintz | https://www.mintz.com/mintz-matrix/Utah | ||||
| Vermont | VT | 32 | https://legislature.vermont.gov/statutes/section/09/062/02435 | PPlan | https://privacyplan.net/state-data-breach-law/vermont.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-vermont.html | CSR | https://csrcyberprivacy.com/privacy-regulations/vermont | DWT | https://www.dwt.com/gcp/states/vermont/ | Lewis | https://lewisbrisbois.com/privacy/US/Vermont/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=VT | Mintz | https://www.mintz.com/mintz-matrix/Vermont | Portal | ago.securitybreach@vermont.gov | Database | http://ago.vermont.gov/data-security-breaches/ |
| Virgin Islands | VI | 25 | https://advance.lexis.com/container?config=024453JABiMWFjOTk0OS1hNTVlLTQ1MDctYmZkOS1mNGRkY2I0ZTg2YzQKAFBvZENhdGFsb2fNaUTUAugmXPqNctTcuqLy&crid=64f20113-6ffc-44f5-b260-1e5fdea78634 | PPlan | https://privacyplan.net/state-data-breach-law/virgin-islands.htm | DWT | https://www.dwt.com/gcp/states/virgin-islands/ | Lewis | https://lewisbrisbois.com/privacy/US/US%20Virgin%20Islands/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=VI | Mintz | https://www.mintz.com/mintz-matrix/Virgin-Islands | ||||||||
| Virginia | VI | 28 | http://law.lis.virginia.gov/vacode/title18.2/chapter6/section18.2-186.6/ | PPlan | https://privacyplan.net/state-data-breach-law/virginia.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-virginia.html | CSR | https://csrcyberprivacy.com/privacy-regulations/virginia | DWT | https://www.dwt.com/gcp/states/virginia/ | Lewis | https://lewisbrisbois.com/privacy/US/Virginia/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=VI | Mintz | https://www.mintz.com/mintz-matrix/Virginia | Portal | https://www.oag.state.va.us/files/Data_Breach_Notification_Req.pdf | Defunct | |
| Washington | WA | 3 | https://app.leg.wa.gov/RCW/default.aspx?cite=19.255.010 | PPlan | https://privacyplan.net/state-data-breach-law/washington.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-washington.html | CSR | https://csrcyberprivacy.com/privacy-regulations/washington | DWT | https://www.dwt.com/gcp/states/washington/ | Lewis | https://lewisbrisbois.com/privacy/US/Washington/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=WA | Mintz | https://www.mintz.com/mintz-matrix/Washington | Portal | https://www.atg.wa.gov/identity-theft-and-privacy-guide-businesses#Report | Database | http://www.atg.wa.gov/data-breach-notifications |
| West Virginia | WV | 48 | http://www.wvlegislature.gov/WVCODE/Code.cfm?chap=46a&art=2A#2A | PPlan | https://privacyplan.net/state-data-breach-law/west-virginia.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-west-virginia.html | CSR | https://csrcyberprivacy.com/privacy-regulations/west-virginia | DWT | https://www.dwt.com/gcp/states/west-virginia/ | Lewis | https://lewisbrisbois.com/privacy/US/West%20Virginia/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=WV | Mintz | https://www.mintz.com/mintz-matrix/West-Virginia | ||||
| Wisconsin | WI | 37 | https://docs.legis.wisconsin.gov/statutes/statutes/134/98 | PPlan | https://privacyplan.net/state-data-breach-law/wisconsin.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-wisconsin.html | CSR | https://csrcyberprivacy.com/privacy-regulations/wisconsin | DWT | https://www.dwt.com/gcp/states/wisconsin/ | Lewis | https://lewisbrisbois.com/privacy/US/Wisconsin/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=WI | Mintz | https://www.mintz.com/mintz-matrix/Wisconsin | Database | https://datcp.wi.gov/Pages/Programs_Services/DataBreaches.aspx | ||
| Wyoming | WY | 44 | https://codes.findlaw.com/wy/title-40-trade-and-commerce/wy-st-sect-40-12-501.html | PPlan | https://privacyplan.net/state-data-breach-law/wyoming.htm | Perkins | https://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-wyoming.html | CSR | https://csrcyberprivacy.com/privacy-regulations/wyoming | DWT | https://www.dwt.com/gcp/states/wyoming/ | Lewis | https://lewisbrisbois.com/privacy/US/Wyoming/data-breach | Baker | https://www.bakerlaw.com/datamap_ajax.aspx?statename=WY | Mintz | https://www.mintz.com/mintz-matrix/Wyoming |
Other State Data Breach Law Resources
Data Breach Legislation News
- Baker: News about Data Breach Notification laws
- JDSupra: State Data Breach Notification Statutes – Topic
- NCSL 2021 Security Breach Legislation
Various Other Great Info
Full Guides – Downloadable
- Foley & Lardner (PDF) May 2021
- Keller and Heckman (PDF) June 2021
- FoxRothschild (PDF) July 2020
- Davis Wright Tremaine (PDF) 2020
- O’Melveny & Myers (PDF) 2020
