Breach Notice Map

Introduction

The State Data Breach Map provides an overview of the U.S. state data breach laws. All 50 U.S. states, along with the District of Columbia, Guam, Puerto Rico, and the U.S. Virgin Islands, have enacted data breach notification laws requiring organizations to notify individuals when their personal information is affected in a data breach. The laws vary by jurisdiction including the definition of a breach, what constitutes personal information, whether notice is required to the state privacy authority, and the timing of such notices. This map is meant to provide an overview of some of these state law nuances and to assist with the complex patchwork of state laws.

Disclaimer

This material is provided for informational purposes only. It is not intended to constitute legal advice, nor does it create a client lawyer relationship between Fisher & Phillips LLP and any recipient. Recipients should consult with counsel before taking any actions based on the information contained within this material.