Security Breach Notification: State Laws Chart

This chart provides information regarding security breach notification legislation which has been enacted in U.S. jurisdictions. The pioneering statute on this issue, California's Security Breach Notification Act (Senate Bill No. 1386), is used as the baseline for comparisons herein.

This chart was updated on June 24, 2008, to reflect Alaska's enactment of a Personal information Protection Act effective July 1, 2009.

This chart was updated on May 14, 2008, to reflect Iowa's recently enacted security breach notification statute.

This chart was updated on May 2, 2008, to reflect that Oklahoma amended several provisions and expanded statute to apply to all entities that own or license computerized data. Previously it was limited to government agencies.