skip to main content
Experience List
DWT
  • Email Page
  • Create PDF
  • Print Page

Summary of U.S. State Data Breach Notification Statutes

Davis Wright Tremaine’s Privacy & Security practice group maintains this summary of the 47 state data breach notification statutes. Copies of the state statutes are available through the National Conference of State Legislatures website. The summary should help answer questions about state data breach notification requirements but it is not intended to provide legal advice, which can only be given in response to inquiries regarding particular situations.

If you have questions about data breach notification requirements, please contact one of the members of our Privacy & Security group who counsels businesses and individuals about such requirements, including Christin McMeley, Adam Greene, Tom Burke, and Bob Scott. If you have questions or comments about this summary, please contact Christin McMeley.

Alabama* 
Alaska 
Arizona 
Arkansas 
California 
Colorado 
Connecticut 
Delaware 
District of Columbia 
Florida 
Georgia
Guam 
Hawaii 
Idaho 
Illinois 
Indiana 
Iowa 
Kansas 
Kentucky
Louisiana 
Maine 
Maryland 
Massachusetts 
Michigan 
Minnesota 
Mississippi 
Missouri 
Montana 
Nebraska 
Nevada 
New Hampshire 
New Jersey
New Mexico* 
New York 
North Carolina 
North Dakota
Ohio 
Oklahoma 
Oregon 
Pennsylvania
Puerto Rico 
Rhode Island 
South Carolina
South Dakota* 
Tennessee 
Texas 
Utah 
Vermont
Virgin Islands 
Virginia 
Washington 
West Virginia 
Wisconsin 
Wyoming 

*Alabama, New Mexico, and South Dakota have not enacted security breach notification statutes.

To print or save this summary, click here.