• Home
  • State Data Breach Law Reference Links

State Data Breach Law Reference Links

◈ Links to our Analysis Pages
◈ Links to the Best Reference Guides
◈ Links to State Statutes, Portals, DBs
◈ State Statute Scoring

State Data Breach Laws: Analysis

Unique data. Hand-curated.

State Data Breach Notification Laws: Resources & Analysis

Breach Law Scoring

Scoring & Ranking of State Data Breach Notification Laws

Harm Triggers

Harm Trigger Analysis of State Data Breach Notification Laws

PII Coverage

PII Analysis of State Data Breach Notification Laws

State Data Breach Law: Reference Links

State Breach StatuteAbbrPPlan
Rank		Privacy
Plan		Perkins
Coie		CSR
Privacy		DWTLewisBakerMintzReporting
Portal		DB of
Breaches
AlabamaAL23http://alisondb.legislature.state.al.us/alison/CodeOfAlabama/1975/8-38-2.htmPPlanhttps://privacyplan.net/state-data-breach-law/alabama.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-alabama.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/alabamaDWThttps://www.dwt.com/gcp/states/alabama/Lewishttps://lewisbrisbois.com/privacy/US/Alabama/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=ALMintzhttps://www.mintz.com/mintz-matrix/AlabamaPortalhttps://my.alabamaag.gov/
AlaskaAK33http://law.alaska.gov/department/civil/consumer/4548.htmlPPlanhttps://privacyplan.net/state-data-breach-law/alaska.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-alaska.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/alaskaDWThttps://www.dwt.com/gcp/states/alaska/Lewishttps://lewisbrisbois.com/privacy/US/Alaska/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=AKMintzhttps://www.mintz.com/mintz-matrix/Alaska
ArizonaAZ39https://www.azleg.gov/viewdocument/?docName=https://www.azleg.gov/ars/18/00551.htmPPlanhttps://privacyplan.net/state-data-breach-law/arizona.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-arizona.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/arizonaDWThttps://www.dwt.com/gcp/states/arizona/Lewishttps://lewisbrisbois.com/privacy/US/Arizona/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=AZMintzhttps://www.mintz.com/mintz-matrix/ArizonaPortalhttps://www.azag.gov/consumer/data-breach/notification-form-business
ArkansasAR26https://law.justia.com/codes/arkansas/2010/title-4/subtitle-7/chapter-110/4-110-105/PPlanhttps://privacyplan.net/state-data-breach-law/arkansas.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-arkansas.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/arkansasDWThttps://www.dwt.com/gcp/states/arkansas/Lewishttps://lewisbrisbois.com/privacy/US/Arkansas/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=ARMintzhttps://www.mintz.com/mintz-matrix/ArkansasPortalhttps://www.arkansasag.gov/consumer-protection/
CaliforniaCA1http://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.29PPlanhttps://privacyplan.net/state-data-breach-law/california.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-california.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/californiaDWThttps://www.dwt.com/gcp/states/california/Lewishttps://lewisbrisbois.com/privacy/US/California/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=CAMintzhttps://www.mintz.com/mintz-matrix/CaliforniaPortalhttps://oag.ca.gov/privacy/databreach/report-a-breachDatabasehttps://oag.ca.gov/privacy/databreach/list
ColoradoCO5https://codes.findlaw.com/co/title-6-consumer-and-commercial-affairs/co-rev-st-sect-6-1-716.htmlPPlanhttps://privacyplan.net/state-data-breach-law/colorado.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-colorado.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/coloradoDWThttps://www.dwt.com/gcp/states/colorado/Lewishttps://lewisbrisbois.com/privacy/US/Colorado/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=COMintzhttps://www.mintz.com/mintz-matrix/ColoradoPortaldatabreach@coag.gov
ConnecticutCT19https://www.cga.ct.gov/current/pub/chap_669.htm#sec_36a-701bPPlanhttps://privacyplan.net/state-data-breach-law/connecticut.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-connecticut.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/connecticutDWThttps://www.dwt.com/gcp/states/connecticut/Lewishttps://lewisbrisbois.com/privacy/US/Connecticut/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=CTMintzhttps://www.mintz.com/mintz-matrix/ConnecticutPortalhttps://portal.ct.gov/AG/General/Report-a-Breach-of-Security-Involving-Computerized-Data
DelawareDE27http://delcode.delaware.gov/title6/c012b/index.shtmlPPlanhttps://privacyplan.net/state-data-breach-law/delaware.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-delaware.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/delawareDWThttps://www.dwt.com/gcp/states/delaware/Lewishttps://lewisbrisbois.com/privacy/US/Delaware/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=DEMintzhttps://www.mintz.com/mintz-matrix/DelawarePortalhttps://attorneygeneral.delaware.gov/fraud/cpu/securitybreachnotification/form/Databasehttps://attorneygeneral.delaware.gov/fraud/cpu/securitybreachnotification/
District of ColumbiaDC2https://code.dccouncil.us/dc/council/code/titles/28/chapters/38/subchapters/II/PPlanhttps://privacyplan.net/state-data-breach-law/district-of-columbia.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-district-of-columbia.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/washington-d-c/DWThttps://www.dwt.com/gcp/states/district-of-columbia/Lewishttps://lewisbrisbois.com/privacy/US/District%20of%20Columbia/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=DCMintzhttps://www.mintz.com/mintz-matrix/washington-dcPortalhttps://oag.dc.gov/requirements-districts-data-breach-notification
FloridaFL9http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&Search_String=&URL=0500-0599/0501/Sections/0501.171.htmlPPlanhttps://privacyplan.net/state-data-breach-law/florida.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-florida.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/floridaDWThttps://www.dwt.com/gcp/states/florida/Lewishttps://lewisbrisbois.com/privacy/US/Florida/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=FLMintzhttps://www.mintz.com/mintz-matrix/FloridaPortalhttp://myfloridalegal.com/contact.nsf/contact?Open&Section=Citizen_Services
GeorgiaGA34https://codes.findlaw.com/ga/title-10-commerce-and-trade/ga-code-sect-10-1-910.htmlPPlanhttps://privacyplan.net/state-data-breach-law/georgia.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-georgia.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/georgiaDWThttps://www.dwt.com/gcp/states/georgia/Lewishttps://lewisbrisbois.com/privacy/US/Georgia/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=GAMintzhttps://www.mintz.com/mintz-matrix/Georgia
GuamGU52http://www.guamcourts.org/CompilerofLaws/GCA/09gca/9gc048.pdfPPlanhttps://privacyplan.net/state-data-breach-law/guam.htmDWThttps://www.dwt.com/gcp/states/guam/Lewishttps://lewisbrisbois.com/privacy/US/Guam/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=GU
HawaiiHI11https://www.capitol.hawaii.gov/hrscurrent/Vol11_Ch0476-0490/HRS0487N/HRS_0487N-0002.htmPPlanhttps://privacyplan.net/state-data-breach-law/hawaii.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-hawaii.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/hawaiiDWThttps://www.dwt.com/gcp/states/hawaii/Lewishttps://lewisbrisbois.com/privacy/US/Hawaii/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=HIMintzhttps://www.mintz.com/mintz-matrix/HawaiiPortalhttps://ag.hawaii.gov/contact-us/email-the-department-of-ag/Databasehttp://cca.hawaii.gov/ocp/security-breach-notices/
IdahoID51https://legislature.idaho.gov/statutesrules/idstat/Title28/T28CH51/SECT28-51-105/PPlanhttps://privacyplan.net/state-data-breach-law/idaho.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-idaho.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/idahoDWThttps://www.dwt.com/gcp/states/idaho/Lewishttps://lewisbrisbois.com/privacy/US/Idaho/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=IDMintzhttps://www.mintz.com/mintz-matrix/Idaho
IllinoisIL7http://www.ilga.gov/legislation/ilcs/ilcs3.asp?ActID=2702&ChapAct=815%C2%A0ILCS%C2%A0530/&ChapterID=67&ChapterName=BUSINESS+TRANSACTIONS&ActName=Personal+Information+Protection+Act.PPlanhttps://privacyplan.net/state-data-breach-law/illinois.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-illinois.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/illinoisDWThttps://www.dwt.com/gcp/states/illinois/Lewishttps://lewisbrisbois.com/privacy/US/Illinois/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=ILMintzhttps://www.mintz.com/mintz-matrix/IllinoisPortalhttp://www.illinoisattorneygeneral.gov/about/email_ag.jsp
IndianaIN41http://iga.in.gov/legislative/laws/2020/ic/titles/004#4-1-11PPlanhttps://privacyplan.net/state-data-breach-law/indiana.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-indiana.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/indianaDWThttps://www.dwt.com/gcp/states/indiana/Lewishttps://lewisbrisbois.com/privacy/US/Indiana/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=INMintzhttps://www.mintz.com/mintz-matrix/IndianaPortalhttps://www.in.gov/attorneygeneral/files/Indiana%20Data%20Breach%20Notification%20Form.pdfDatabasehttps://www.in.gov/attorneygeneral/2874.htm
IowaIA38https://www.legis.iowa.gov/docs/code/715c.pdfPPlanhttps://privacyplan.net/state-data-breach-law/iowa.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-iowa.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/iowaDWThttps://www.dwt.com/gcp/states/iowa/Lewishttps://lewisbrisbois.com/privacy/US/Iowa/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=IAMintzhttps://www.mintz.com/mintz-matrix/IowaPortalconsumer@ag.iowa.govDatabasehttps://www.iowaattorneygeneral.gov/for-consumers/security-breach-notifications/
KansasKS49http://www.kslegislature.org/li_2014/b2013_14/statute/050_000_0000_chapter/050_007a_0000_article/PPlanhttps://privacyplan.net/state-data-breach-law/kansas.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-kansas.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/kansasDWThttps://www.dwt.com/gcp/states/kansas/Lewishttps://lewisbrisbois.com/privacy/US/Kansas/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=KSMintzhttps://www.mintz.com/mintz-matrix/Kansas
KentuckyKY40https://codes.findlaw.com/ky/title-xxix-commerce-and-trade/ky-rev-st-sect-365-732.htmlPPlanhttps://privacyplan.net/state-data-breach-law/kentucky.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-kentucky.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/kentuckyDWThttps://www.dwt.com/gcp/states/kentucky/Lewishttps://lewisbrisbois.com/privacy/US/Kentucky/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=KYMintzhttps://www.mintz.com/mintz-matrix/Kentucky
LouisianaLA12PPlanhttps://privacyplan.net/state-data-breach-law/louisiana.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-louisiana.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/louisianaDWThttps://www.dwt.com/gcp/states/louisiana/Lewishttps://lewisbrisbois.com/privacy/US/Louisiana/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=LAMintzhttps://www.mintz.com/mintz-matrix/LouisianaPortalhttp://www.ag.state.la.us/Article/9707
MaineME36http://legislature.maine.gov/statutes/10/title10ch210-Bsec0.htmlPPlanhttps://privacyplan.net/state-data-breach-law/maine.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-maine.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/maineDWThttps://www.dwt.com/gcp/states/maine/Lewishttps://lewisbrisbois.com/privacy/US/Maine/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=MEMintzhttps://www.mintz.com/mintz-matrix/MaineDatabasehttps://www.maine.gov/ag/consumer/identity_theft/index.shtml
MarylandMD4https://codes.findlaw.com/md/commercial-law/md-code-com-law-sect-14-3501.htmlPPlanhttps://privacyplan.net/state-data-breach-law/maryland.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-maryland.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/marylandDWThttps://www.dwt.com/gcp/states/maryland/Lewishttps://lewisbrisbois.com/privacy/US/Maryland/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=MDMintzhttps://www.mintz.com/mintz-matrix/MarylandPortalidtheft@oag.state.md.usDatabasehttp://www.marylandattorneygeneral.gov/Pages/IdentityTheft/breachnotices.aspx
MassachusettsMA8https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXV/Chapter93H/Section1PPlanhttps://privacyplan.net/state-data-breach-law/massachusetts.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-massachusetts.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/massachusettsDWThttps://www.dwt.com/gcp/states/massachusetts/Lewishttps://lewisbrisbois.com/privacy/US/Massachusetts/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=MAMintzhttps://www.mintz.com/mintz-matrix/MassachusettsPortalhttps://www.mass.gov/forms/data-breach-notification-submissionDatabasehttps://www.mass.gov/lists/data-breach-notification-reports
MichiganMI42https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXV/Chapter93H/Section1PPlanhttps://privacyplan.net/state-data-breach-law/michigan.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-michigan.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/michiganDWThttps://www.dwt.com/gcp/states/michigan/Lewishttps://lewisbrisbois.com/privacy/US/Michigan/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=MIMintzhttps://www.mintz.com/mintz-matrix/Michigan
MinnesotaMN16PPlanhttps://privacyplan.net/state-data-breach-law/minnesota.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-minnesota.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/minnesotaDWThttps://www.dwt.com/gcp/states/minnesota/Lewishttps://lewisbrisbois.com/privacy/US/Minnesota/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=MNMintzhttps://www.mintz.com/mintz-matrix/Minnesota
MississippiMS50https://advance.lexis.com/documentpage/?pdmfid=1000516&crid=44f0d968-6ef3-4aef-a2db-7ec4c9f0e2c7&nodeid=ABNAAWAABAAQ&nodepath=%2FROOT%2FABN%2FABNAAW%2FABNAAWAAB%2FABNAAWAABAAQ&level=4&haschildren=&populated=false&title=%C2%A7+75-24-29.+Persons+conducting+business+in+Mississippi+required+to+provide+notice+of+a+breach+of+security+involving+personal+information+to+all+affected+individuals%3B+enforcement.&config=00JABhZDIzMTViZS04NjcxLTQ1MDItOTllOS03MDg0ZTQxYzU4ZTQKAFBvZENhdGFsb2f8inKxYiqNVSihJeNKRlUp&pddocfullpath=%2Fshared%2Fdocument%2Fstatutes-legislation%2Furn%3AcontentItem%3A8P6B-8782-8T6X-74VC-00008-00&ecomp=k5v8kkk&prid=9be20549-c96b-46a9-b338-d9943601c47dPPlanhttps://privacyplan.net/state-data-breach-law/mississippi.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-mississippi.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/mississippiDWThttps://www.dwt.com/gcp/states/mississippi/Lewishttps://lewisbrisbois.com/privacy/US/Mississippi/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=MSMintzhttps://www.mintz.com/mintz-matrix/Mississippi
MissouriMO45https://revisor.mo.gov/main/OneSection.aspx?section=407.1500&bid=23329&hl=PPlanhttps://privacyplan.net/state-data-breach-law/missouri.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-missouri.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/missouriDWThttps://www.dwt.com/gcp/states/missouri/Lewishttps://lewisbrisbois.com/privacy/US/Missouri/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=MOMintzhttps://www.mintz.com/mintz-matrix/MissouriPortalconsumer.help@ago.mo.gov
MontanaMT30https://leg.mt.gov/bills/mca_toc/30_14_17.htmPPlanhttps://privacyplan.net/state-data-breach-law/montana.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-montana.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/montanaDWThttps://www.dwt.com/gcp/states/montana/Lewishttps://lewisbrisbois.com/privacy/US/Montana/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=MTMintzhttps://www.mintz.com/mintz-matrix/MontanaPortalhttps://dojmt.gov/consumer/data-breaches-businesses/Databasehttps://dojmt.gov/consumer/databreach/
NebraskaNE35https://nebraskalegislature.gov/laws/statutes.php?statute=87-802PPlanhttps://privacyplan.net/state-data-breach-law/nebraska.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-nebraska.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/nebraskaDWThttps://www.dwt.com/gcp/states/nebraska/Lewishttps://lewisbrisbois.com/privacy/US/Nebraska/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=NEMintzhttps://www.mintz.com/mintz-matrix/NebraskaPortalhttps://protectthegoodlife.nebraska.gov/data-breach-notification
NevadaNV17https://www.leg.state.nv.us/nrs/nrs-603a.htmlPPlanhttps://privacyplan.net/state-data-breach-law/nevada.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-nevada.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/nevadaDWThttps://www.dwt.com/gcp/states/nevada/Lewishttps://lewisbrisbois.com/privacy/US/Nevada/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=NVMintzhttps://www.mintz.com/mintz-matrix/Nevada
New HampshireNH21PPlanhttps://privacyplan.net/state-data-breach-law/new-hampshire.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-new-hampshire.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/new-hampshireDWThttps://www.dwt.com/gcp/states/new-hampshire/Lewishttps://lewisbrisbois.com/privacy/US/New%20Hampshire/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=NHMintzhttps://www.mintz.com/mintz-matrix/New-HampshireDatabasehttps://www.doj.nh.gov/consumer/security-breaches/index.htm
New JerseyNJ22https://codes.findlaw.com/nj/title-56-trade-names-trademarks-and-unfair-trade-practices/nj-st-sect-56-8-162.htmlPPlanhttps://privacyplan.net/state-data-breach-law/new-jersey.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-new-jersey.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/new-jerseyDWThttps://www.dwt.com/gcp/states/new-jersey/Lewishttps://lewisbrisbois.com/privacy/US/New%20Jersey/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=NJMintzhttps://www.mintz.com/mintz-matrix/New-JerseyPortalhttps://www.njconsumeraffairs.gov/ocp/Pages/cyberfraud.aspxDatabasehttps://www.cyber.nj.gov/data-breach-alerts
New MexicoNM43https://nmlegis.gov/Sessions/17%20Regular/final/HB0015.pdfPPlanhttps://privacyplan.net/state-data-breach-law/new-mexico.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-new-mexico.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/new-mexicoDWThttps://www.dwt.com/gcp/states/new-mexico/Lewishttps://lewisbrisbois.com/privacy/US/New%20Mexico/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=NMMintzhttps://www.mintz.com/mintz-matrix/New-MexicoPortalhttps://www.nmag.gov/file-a-complaint.aspx
New YorkNY31https://www.nysenate.gov/legislation/laws/GBS/899-AAPPlanhttps://privacyplan.net/state-data-breach-law/new-york.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-new-york.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/new-yorkDWThttps://www.dwt.com/gcp/states/new-york/Lewishttps://lewisbrisbois.com/privacy/US/New%20York/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=NYMintzhttps://www.mintz.com/mintz-matrix/New-YorkPortalhttps://formsnym.ag.ny.gov/OAGOnlineSubmissionForm/faces/OAGSBHome
North CarolinaNC6https://codes.findlaw.com/nc/chapter-75-monopolies-trusts-and-consumer-protection/nc-gen-st-sect-75-65.htmlPPlanhttps://privacyplan.net/state-data-breach-law/north-carolina.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-north-carolina.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/north-carolinaDWThttps://www.dwt.com/gcp/states/north-carolina/Lewishttps://lewisbrisbois.com/privacy/US/North%20Carolina/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=NCMintzhttps://www.mintz.com/mintz-matrix/North-CarolinaPortalhttps://ncdoj.gov/protecting-consumers/protecting-your-identity/protect-your-business-from-id-theft/security-breach-information/
North DakotaND10https://codes.findlaw.com/nd/title-51-sales-and-exchanges/nd-cent-code-sect-51-30-02.htmlPPlanhttps://privacyplan.net/state-data-breach-law/north-dakota.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-north-dakota.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/north-dakotaDWThttps://www.dwt.com/gcp/states/north-dakota/Lewishttps://lewisbrisbois.com/privacy/US/North%20Dakota/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=NDMintzhttps://www.mintz.com/mintz-matrix/North-DakotaPortalhttps://attorneygeneral.nd.gov/consumer-resources/data-breach-noticesDatabasehttps://attorneygeneral.nd.gov/consumer-resources/data-breach-notices
OhioOH47https://codes.ohio.gov/ohio-revised-code/section-1349.19PPlanhttps://privacyplan.net/state-data-breach-law/ohio.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-ohio.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/ohioDWThttps://www.dwt.com/gcp/states/ohio/Lewishttps://lewisbrisbois.com/privacy/US/Ohio/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=OHMintzhttps://www.mintz.com/mintz-matrix/Ohio
OklahomaOK53https://www.bakerlaw.com/webfiles/Privacy/Map/State-Data-Breach-Statute/Oklahoma.pdfPPlanhttps://privacyplan.net/state-data-breach-law/oklahoma.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-oklahoma.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/oklahomaDWThttps://www.dwt.com/gcp/states/oklahoma/Lewishttps://lewisbrisbois.com/privacy/US/Oklahoma/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=OKMintzhttps://www.mintz.com/mintz-matrix/OklahomaDatabasehttps://cybersecurity.ok.gov/breaches
OregonOR13https://www.oregonlaws.org/ors/646A.604PPlanhttps://privacyplan.net/state-data-breach-law/oregon.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-oregon.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/oregonDWThttps://www.dwt.com/gcp/states/oregon/Lewishttps://lewisbrisbois.com/privacy/US/Oregon/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=ORMintzhttps://www.mintz.com/mintz-matrix/OregonPortalhttps://justice.oregon.gov/consumer/DataBreach/Home/SubmitDatabasehttps://justice.oregon.gov/consumer/DataBreach/
PennsylvaniaPA46https://govt.westlaw.com/pac/Document/N5406B1B08C5311DA943797541B5FDE35?viewType=FullText&originationContext=documenttoc&transitionType=CategoryPageItem&contextData=(sc.Default)&bhcp=1PPlanhttps://privacyplan.net/state-data-breach-law/pennsylvania.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-pennsylvania.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/pennsylvaniaDWThttps://www.dwt.com/gcp/states/pennsylvania/Lewishttps://lewisbrisbois.com/privacy/US/Pennsylvania/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=PAMintzhttps://www.mintz.com/mintz-matrix/Pennsylvania
Puerto RicoPR15https://advance.lexis.com/documentpage/?pdmfid=1000516&crid=3dae5e3e-ddd2-49bf-8535-aadcdeb8fb71&nodeid=AAMAADABGAAB&nodepath=%2FROOT%2FAAM%2FAAMAAD%2FAAMAADABG%2FAAMAADABGAAB&level=4&haschildren=&populated=false&title=%C2%A7+4051.+Definitions&config=00JABkODU1MGI4OC1hMmRkLTQ2MGYtOGY1NS03YjVjOWM4YjJlZjAKAFBvZENhdGFsb2d0HiKld62itjBDGzN8H7lV&pddocfullpath=%2Fshared%2Fdocument%2Fstatutes-legislation%2Furn%3AcontentItem%3A5D6S-8B41-66SD-80SR-00008-00&ecomp=k5v8kkk&prid=80ede612-e1e6-4866-a3e4-ff35f4f52440PPlanhttps://privacyplan.net/state-data-breach-law/puerto-rico.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-puerto-rico.htmlCSRDWThttps://www.dwt.com/gcp/states/puerto-rico/Lewishttps://lewisbrisbois.com/privacy/US/Puerto%20Rico/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=PRMintzhttps://www.mintz.com/mintz-matrix/Puerto-Rico
Rhode IslandRI20http://webserver.rilin.state.ri.us/Statutes/TITLE11/11-49.3/11-49.3-4.HTMPPlanhttps://privacyplan.net/state-data-breach-law/rhode-island.htmPerkinshttps://www.perkinscoie.com/en/news-insights/rhode-island.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/rhode-islandDWThttps://www.dwt.com/gcp/states/rhode-island/Lewishttps://lewisbrisbois.com/privacy/US/Rhode%20Island/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=RIMintzhttps://www.mintz.com/mintz-matrix/Rhode-IslandPortalhttps://riag.wufoo.com/forms/q1851amb1bdd4d5/
South CarolinaSC18https://www.scstatehouse.gov/query.php?search=DOC&searchtext=SECTION%2039%201%2090&category=CODEOFLAWS&conid=36689925&result_pos=0&keyval=17283&numrows=10PPlanhttps://privacyplan.net/state-data-breach-law/south-carolina.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-south-carolina.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/south-carolinaDWThttps://www.dwt.com/gcp/states/south-carolina/Lewishttps://lewisbrisbois.com/privacy/US/South%20Carolina/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=SCMintzhttps://www.mintz.com/mintz-matrix/South-CarolinaPortalhttps://www.consumer.sc.gov/about-us/contact-usDatabasehttps://consumer.sc.gov/identity-theft-unit/security-breaches
South DakotaSD24https://sdlegislature.gov/Statutes/Codified_Laws/2047702PPlanhttps://privacyplan.net/state-data-breach-law/south-dakota.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-south-dakota.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/south-dakotaDWThttps://www.dwt.com/gcp/states/south-dakota/Lewishttps://lewisbrisbois.com/privacy/US/South%20Dakota/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=SDMintzhttps://www.mintz.com/mintz-matrix/South-DakotaPortalconsumerhelp@state.sd.us
TennesseeTN29https://advance.lexis.com/documentpage/?pdmfid=1000516&crid=ae167118-3d03-4a8c-af3c-83c6191bfd5e&nodeid=ABVAAUAAVAAH&nodepath=%2FROOT%2FABV%2FABVAAU%2FABVAAUAAV%2FABVAAUAAVAAH&level=4&haschildren=&populated=false&title=47-18-2107.+Release+of+personal+consumer+information.&config=025054JABlOTJjNmIyNi0wYjI0LTRjZGEtYWE5ZC0zNGFhOWNhMjFlNDgKAFBvZENhdGFsb2cDFQ14bX2GfyBTaI9WcPX5&pddocfullpath=%2Fshared%2Fdocument%2Fstatutes-legislation%2Furn%3AcontentItem%3A4X8K-XB40-R03J-K1K5-00008-00&ecomp=f38_kkk&prid=1ebbe805-18ab-4aae-92e0-ec985d915ffaPPlanhttps://privacyplan.net/state-data-breach-law/tennessee.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-tennessee.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/tennesseeDWThttps://www.dwt.com/gcp/states/tennessee/Lewishttps://lewisbrisbois.com/privacy/US/Tennessee/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=TNMintzhttps://www.mintz.com/mintz-matrix/Tennessee
TexasTX14https://statutes.capitol.texas.gov/Docs/BC/htm/BC.521.htm#521.002PPlanhttps://privacyplan.net/state-data-breach-law/texas.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-texas.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/texasDWThttps://www.dwt.com/gcp/states/texas/Lewishttps://lewisbrisbois.com/privacy/US/Texas/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=TXMintzhttps://www.mintz.com/mintz-matrix/TexasPortalhttps://oagtx.force.com/datasecuritybreachreport/s/Databasehttps://oagtx.force.com/datasecuritybreachreport/apex/DataSecurityReportsPage
UtahUT54https://le.utah.gov/xcode/Title13/Chapter44/C13-44_1800010118000101.pdfPPlanhttps://privacyplan.net/state-data-breach-law/utah.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-utah.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/utahDWThttps://www.dwt.com/gcp/states/utah/Lewishttps://lewisbrisbois.com/privacy/US/Utah/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=UTMintzhttps://www.mintz.com/mintz-matrix/Utah
VermontVT32https://legislature.vermont.gov/statutes/section/09/062/02435PPlanhttps://privacyplan.net/state-data-breach-law/vermont.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-vermont.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/vermontDWThttps://www.dwt.com/gcp/states/vermont/Lewishttps://lewisbrisbois.com/privacy/US/Vermont/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=VTMintzhttps://www.mintz.com/mintz-matrix/VermontPortalago.securitybreach@vermont.govDatabasehttp://ago.vermont.gov/data-security-breaches/
Virgin IslandsVI 25https://advance.lexis.com/container?config=024453JABiMWFjOTk0OS1hNTVlLTQ1MDctYmZkOS1mNGRkY2I0ZTg2YzQKAFBvZENhdGFsb2fNaUTUAugmXPqNctTcuqLy&crid=64f20113-6ffc-44f5-b260-1e5fdea78634PPlanhttps://privacyplan.net/state-data-breach-law/virgin-islands.htmDWThttps://www.dwt.com/gcp/states/virgin-islands/Lewishttps://lewisbrisbois.com/privacy/US/US%20Virgin%20Islands/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=VI Mintzhttps://www.mintz.com/mintz-matrix/Virgin-Islands
VirginiaVI28http://law.lis.virginia.gov/vacode/title18.2/chapter6/section18.2-186.6/PPlanhttps://privacyplan.net/state-data-breach-law/virginia.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-virginia.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/virginiaDWThttps://www.dwt.com/gcp/states/virginia/Lewishttps://lewisbrisbois.com/privacy/US/Virginia/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=VIMintzhttps://www.mintz.com/mintz-matrix/VirginiaPortalhttps://www.oag.state.va.us/files/Data_Breach_Notification_Req.pdfDefunct
WashingtonWA3https://app.leg.wa.gov/RCW/default.aspx?cite=19.255.010PPlanhttps://privacyplan.net/state-data-breach-law/washington.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-washington.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/washingtonDWThttps://www.dwt.com/gcp/states/washington/Lewishttps://lewisbrisbois.com/privacy/US/Washington/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=WAMintzhttps://www.mintz.com/mintz-matrix/WashingtonPortalhttps://www.atg.wa.gov/identity-theft-and-privacy-guide-businesses#ReportDatabasehttp://www.atg.wa.gov/data-breach-notifications
West VirginiaWV48http://www.wvlegislature.gov/WVCODE/Code.cfm?chap=46a&art=2A#2APPlanhttps://privacyplan.net/state-data-breach-law/west-virginia.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-west-virginia.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/west-virginiaDWThttps://www.dwt.com/gcp/states/west-virginia/Lewishttps://lewisbrisbois.com/privacy/US/West%20Virginia/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=WVMintzhttps://www.mintz.com/mintz-matrix/West-Virginia
WisconsinWI37https://docs.legis.wisconsin.gov/statutes/statutes/134/98PPlanhttps://privacyplan.net/state-data-breach-law/wisconsin.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-wisconsin.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/wisconsinDWThttps://www.dwt.com/gcp/states/wisconsin/Lewishttps://lewisbrisbois.com/privacy/US/Wisconsin/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=WIMintzhttps://www.mintz.com/mintz-matrix/WisconsinDatabasehttps://datcp.wi.gov/Pages/Programs_Services/DataBreaches.aspx
WyomingWY44https://codes.findlaw.com/wy/title-40-trade-and-commerce/wy-st-sect-40-12-501.htmlPPlanhttps://privacyplan.net/state-data-breach-law/wyoming.htmPerkinshttps://www.perkinscoie.com/en/news-insights/security-breach-notification-chart-wyoming.htmlCSRhttps://csrcyberprivacy.com/privacy-regulations/wyomingDWThttps://www.dwt.com/gcp/states/wyoming/Lewishttps://lewisbrisbois.com/privacy/US/Wyoming/data-breachBakerhttps://www.bakerlaw.com/datamap_ajax.aspx?statename=WYMintzhttps://www.mintz.com/mintz-matrix/Wyoming

Other State Data Breach Law Resources

Data Breach Legislation News

Various Other Great Info

Full Guides – Downloadable

Other Data Sets from PrivacyPlan

Privacy Podcast DB

Visit our Privacy Podcast Database. Over 90 privacy-related podcasts!

Privacy Legislation Grid

Privacy law is a complex patchwork. We’ve highlighted that complexity by categorizing laws in new ways.

Biometric Identifier DB

38 discrete biometrics that can be used to identify humans, packaged and digestible for privacy professionals.

CIPP/US Enhanced Body of Knowledge

CIPP/US certification questions are not divided evenly amongst subjects. This guide shows you where to focus your study and offers tools to so.