---
title: Data Breach Reporting Laws
description: Data Breach Reporting Laws
---

[WatchPoint Security Blog](https://blog.canauri.com)

# [Data Breach Reporting Laws](https://blog.canauri.com/data_breach_reporting_laws/)

 Written by [Greg Edwards](https://blog.canauri.com/author/greg-edwards) | August 11, 2015

 Mandatory data breach reporting laws are on the books for 47 states. Click below to read your state's law. These are a very dry read, but something every business owner or manager should be aware of. Cyber liability insurance is now a must have for every business. The cost of properly dealing with a data breach is overwhelming. Don't rely on insurance alone though. Just because your building is covered by liability insurance in case of a fire, that doesn't mean you want it to burn down. Imagine the feeling of having to contact your best client to let them know their data was stolen because you didn't properly protect it.

| State | Citation |
| --- | --- |
| Alaska | [Alaska Stat. § 45.48.010 et seq.](http://www.legis.state.ak.us/basis/folioproxy.asp?url=http://wwwjnu01.legis.state.ak.us/cgi-bin/folioisa.dll/stattx09/query=%5bJUMP:%27AS4548010%27%5d/doc/%7b@1%7d?firsthit) |
| Arizona | [Ariz. Rev. Stat. § 44-7501](http://www.azleg.state.az.us/FormatDocument.asp?inDoc=/ars/44/07501.htm&Title=44) |
| Arkansas | [Ark. Code § 4-110-101 et seq.](http://www.lexis-nexis.com/hottopics/arcode/) |
| California | Cal. Civ. Code §§ [1798.29](http://www.leginfo.ca.gov/cgi-bin/displaycode?section=civ&group=01001-02000&file=1798.25-1798.29), [1798.80 et seq.](http://www.leginfo.ca.gov/cgi-bin/displaycode?section=civ&group=01001-02000&file=1798.80-1798.84) |
| Colorado | Colo. Rev. Stat. § 6-1-716 |
| Connecticut | [Conn. Gen Stat. § 36a-701b](http://www.cga.ct.gov/current/pub/chap_669.htm#sec_36a-701b) |
| Delaware | [Del. Code tit. 6, § 12B-101 et seq.](http://delcode.delaware.gov/title6/c012b/index.shtml) |
| Florida | Fla. Stat. §§[501.171](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&Search_String=&URL=0500-0599/0501/Sections/0501.171.html), [282.0041](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&Search_String=&URL=0200-0299/0282/Sections/0282.0041.html), [282.318(2)(i)](http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&Search_String=&URL=0200-0299/0282/Sections/0282.318.html) |
| Georgia | [Ga. Code §§ 10-1-910, -911, -912; § 46-5-214](http://www.lexis-nexis.com/hottopics/gacode/Default.asp) |
| Hawaii | [Haw. Rev. Stat. § 487N-1 et seq.](http://www.capitol.hawaii.gov/hrscurrent/Vol11_Ch0476-0490/HRS0487N/HRS_0487N-0001.htm) |
| Idaho | [Idaho Stat. §§ 28-51-104 to -107](http://www.legislature.idaho.gov/idstat/Title28/T28CH51.htm) |
| Illinois | [815 ILCS §§ 530/1 to 530/25](http://www.ilga.gov/legislation/ilcs/ilcs3.asp?ActID=2702&ChapAct=815%C2%A0ILCS%C2%A0530/&ChapterID=67&ChapterName=BUSINESS+TRANSACTIONS&ActName=Personal+Information+Protection+Act.) |
| Indiana | Ind. Code §§ [4-1-11 et seq](http://iga.in.gov/documents/65d15de1)., [24-4.9 et seq.](http://www.in.gov/legislative/ic/code/title24/ar4.9/) |
| Iowa | [Iowa Code §§ 715C.1, 715C.2](https://www.legis.iowa.gov/publications/search/document?fq=id:599063&pdid=601565&q=attorney%20general%20breach#715C.2) |
| Kansas | [Kan. Stat. § 50-7a01 et seq.](http://www.kslegislature.org/li/b2013_14/statute/050_000_0000_chapter/050_007a_0000_article/) |
| Kentucky | KRS § [365.732](http://www.lrc.ky.gov/Statutes/statute.aspx?id=43326), [KRS §§ 61.931 to 61.934](http://www.lrc.ky.gov/Statutes/statute.aspx?id=43575) |
| Louisiana | La. Rev. Stat. §§[51:3071](http://legis.la.gov/Legis/Law.aspx?d=322027) et seq[.](http://www.legis.state.la.us/lss/lss.asp?doc=322030), [40:1300.111 to .116](http://www.legis.la.gov/legis/Law.aspx?d=97303) |
| Maine | [Me. Rev. Stat. tit. 10 § 1347 et seq.](http://janus.state.me.us/legis/statutes/10/title10ch210-Bsec0.html) |
| Maryland | [Md. Code Com. Law §§ 14-3501 et seq., Md. State Govt. Code §§ 10-1301 to -1308](http://www.lexisnexis.com/hottopics/mdcode/) |
| Massachusetts | [Mass. Gen. Laws § 93H-1 et seq.](http://www.mass.gov/legis/laws/mgl/93h-1.htm) |
| Michigan | Mich. Comp. Laws §§ [445.63](http://legislature.mi.gov/doc.aspx?mcl-445-63), [445.72](http://legislature.mi.gov/doc.aspx?mcl-445-72) |
| Minnesota | Minn. Stat. §§ [325E.61](https://www.revisor.mn.gov/statutes/?id=325E.61), [325E.64](https://www.revisor.mn.gov/statutes/?id=325E.64) |
| Mississippi | [Miss. Code Ann. § 75-24-29](http://web.lexisnexis.com/research/xlink?app=00075&view=full&interface=1&docinfo=off&searchtype=get&search=Miss.+Code+Ann.+%25A7+75-24-29) |
| Missouri | [Mo. Rev. Stat. § 407.1500](http://www.moga.mo.gov/statutes/C400-499/4070001500.HTM) |
| Montana | Mont. Code § [2-6-504](http://leg.mt.gov/bills/mca/2/6/2-6-504.htm), [30-14-1701 et seq.](http://leg.mt.gov/bills/mca/30/14/30-14-1704.htm),[2015 H.B. 74](http://leg.mt.gov/bills/2015/BillPdf/HB0074.pdf), [2015 H.B. 123](http://leg.mt.gov/bills/2015/billpdf/HB0123.pdf) |
| Nebraska | Neb. Rev. Stat. §§ [87-801](http://nebraskalegislature.gov/laws/statutes.php?statute=87-801),[-802](http://nebraskalegislature.gov/laws/statutes.php?statute=87-802), [-803](http://nebraskalegislature.gov/laws/statutes.php?statute=87-803), [-804](http://nebraskalegislature.gov/laws/statutes.php?statute=87-804), [-805](http://nebraskalegislature.gov/laws/statutes.php?statute=87-805), [-806](http://nebraskalegislature.gov/laws/statutes.php?statute=87-806), [-807](http://nebraskalegislature.gov/laws/statutes.php?statute=87-807) |
| Nevada | Nev. Rev. Stat. §§ [603A.010 et seq.](http://www.leg.state.nv.us/NRS/NRS-603A.html), [242.183](http://www.leg.state.nv.us/NRS/NRS-242.html#NRS242Sec183) |
| New Hampshire | N.H. Rev. Stat. §§ [359-C:19,](http://www.gencourt.state.nh.us/rsa/html/XXXI/359-C/359-C-19.htm)[-C:20](http://www.gencourt.state.nh.us/rsa/html/XXXI/359-C/359-C-20.htm), [-C:21](http://www.gencourt.state.nh.us/rsa/html/XXXI/359-C/359-C-21.htm) |
| New Jersey | [N.J. Stat. § 56:8-161, -163](http://lis.njleg.state.nj.us/cgi-bin/om_isapi.dll?clientID=597227&depth=2&expandheadings=off&headingswithhits=on&infobase=statutes.nfo&softpage=TOC_Frame_Pg42) |
| New York | [N.Y. Gen. Bus. Law § 899-aa](http://public.leginfo.state.ny.us/LAWSSEAF.cgi?QUERYTYPE=LAWS+&QUERYDATA=@SLGBS0A39-F+&LIST=LAW+&BROWSER=BROWSER+&TOKEN=22062872+&TARGET=VIEW), [N.Y. State Tech. Law 208](http://public.leginfo.state.ny.us/LAWSSEAF.cgi?QUERYTYPE=LAWS+&QUERYDATA=$$STT208$$@TXSTT0208+&LIST=LAW+&BROWSER=BROWSER+&TOKEN=37479598+&TARGET=VIEW) |
| North Carolina | [N.C. Gen. Stat §§ 75-61](http://www.ncga.state.nc.us/EnactedLegislation/Statutes/HTML/BySection/Chapter_75/GS_75-61.html), [75-65](http://www.ncga.state.nc.us/EnactedLegislation/Statutes/HTML/BySection/Chapter_75/GS_75-65.html) |
| North Dakota | [N.D. Cent. Code § 51-30-01 et seq., 2015 S.B. 2214, S.B. 2326](http://www.legis.nd.gov/cencode/t51c30.pdf) |
| Ohio | [Ohio Rev. Code §§ 1347.12](http://codes.ohio.gov/orc/1347.12), [1349.19](http://codes.ohio.gov/orc/1349.19), [1349.191](http://codes.ohio.gov/orc/1349.191), [1349.192](http://codes.ohio.gov/orc/1349.192) |
| Oklahoma | [Okla. Stat. §§ 74-3113.1](http://webserver1.lsb.state.ok.us/OK_Statutes/CompleteTitles/os74.rtf), [24-161 to -166](http://webserver1.lsb.state.ok.us/OK_Statutes/CompleteTitles/os24.rtf) |
| Oregon | [Oregon Rev. Stat. § 646A.600 to .628, 2015 S.B. 601](https://www.oregonlegislature.gov/bills_laws/lawsstatutes/2013ors646A.html) |
| Pennsylvania | [73 Pa. Stat. § 2301 et seq.](http://government.westlaw.com/linkedslice/default.asp?li=%7b998C8FAC-D5F0-4171-99BB-3E93F0AB5F23%7d&RS=GVT1.0&VR=2.0&SP=pac-1000) |
| Rhode Island | [R.I. Gen. Laws § 11-49.2-1 et seq.](http://www.rilin.state.ri.us/Statutes/TITLE11/11-49.2/INDEX.HTM) |
| South Carolina | [S.C. Code § 39-1-90](http://www.scstatehouse.gov/code/t39c001.php), [2013 H.B. 3248](http://www.scstatehouse.gov/sess120_2013-2014/bills/3248.htm) |
| Tennessee | [Tenn. Code § 47-18-2107, 2015 S.B. 416](http://www.michie.com/tennessee/lpext.dll?f=templates&fn=main-h.htm&cp=tncode) |
| Texas | [Tex. Bus. & Com. Code §§ 521.002](http://www.statutes.legis.state.tx.us/Docs/BC/htm/BC.521.htm#521.002), [521.053](http://www.statutes.legis.state.tx.us/Docs/BC/htm/BC.521.htm#521.053), [Tex. Ed. Code § 37.007(b)(5)](http://www.statutes.legis.state.tx.us/Docs/ED/htm/ED.37.htm#37.007) |
| Utah | [Utah Code §§ 13-44-101 et seq., 2015 H.B. 163](http://le.utah.gov/xcode/Title13/Chapter44/13-44.html?v=C13-44_1800010118000101) |
| Vermont | [Vt. Stat. tit. 9 § 2430, 2435](http://legislature.vermont.gov/statutes/chapter/09/062) |
| Virginia | [Va. Code § 18.2-186.6](http://leg1.state.va.us/cgi-bin/legp504.exe?000+cod+18.2-186.6), [§ 32.1-127.1:05,](http://law.lis.virginia.gov/vacode/title32.1/chapter5/section32.1-127.1:05/) [2015 H.B. 2350](https://leg1.state.va.us/cgi-bin/legp504.exe?151+sum+HB2350) |
| Washington | [Wash. Rev. Code § 19.255.010](http://apps.leg.wa.gov/RCW/default.aspx?cite=19.255.010), [42.56.590](http://apps.leg.wa.gov/RCW/default.aspx?cite=42.56.590), 2015 H.B. 1078 |
| West Virginia | [W.V. Code §§ 46A-2A-101 et seq.](http://www.legis.state.wv.us/WVCODE/Code.cfm?chap=46a&art=2A#2A) |
| Wisconsin | [Wis. Stat. § 134.98](http://docs.legis.wisconsin.gov/statutes/statutes/134/98) |
| Wyoming | [Wyo. Stat. § 40-12-501 et seq](http://legisweb.state.wy.us/2015/Enroll/SF0035.pdf)., [2015 S.B. 35](http://legisweb.state.wy.us/2015/Enroll/SF0035.pdf), [2015 S.B. 36](http://legisweb.state.wy.us/2015/Enroll/SF0036.pdf) |
| District of Columbia | [D.C. Code § 28-3851](http://www.lexisnexis.com/hottopics/dccode/) <http://www.lexisnexis.com/hottopics/dccode/> |

 

[View full post](https://blog.canauri.com/data_breach_reporting_laws/)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Greg Edwards"
  },
  "dateModified" : "2021-12-05T18:10:03.242Z",
  "datePublished" : "2015-08-11T11:13:28Z",
  "headline" : "Data Breach Reporting Laws",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://blog.canauri.com/data_breach_reporting_laws/",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://go.watchpointdata.com/hubfs/Logo/watchpoint_css.png",
      "width" : 258.9928
    },
    "name" : "WatchPoint Security Blog"
  }
}
```