Comparing Recent State Data Breach Law Updates

Law360 (September 17, 2020, 4:59 PM EDT) -- From February through June, five states and Washington, D.C., added new or amended existing data breach notification requirements to:

Require attorney general notice;

Broaden existing definitions, e.g., expand the definition of personal information;

Add certain content requirements;

Require credit monitoring services;

Add data security requirements; 

Regulate the insurance industry through implementation of the National Association of Insurance Commissioner's insurance data security model law; and

Narrow the application of substitute notice.

The following table provides a high-level overview of the respective data breach notification requirements, and the below state-by-state sections provide an overview and analysis of the same.


Bill: H.B. 1372

Enacted: March...

Stay ahead of the curve

In the legal profession, information is the key to success. You have to know what’s happening with clients, competitors, practice areas, and industries. Law360 provides the intelligence you need to remain an expert and beat the competition.

  • Access to case data within articles (numbers, filings, courts, nature of suit, and more.)
  • Access to attached documents such as briefs, petitions, complaints, decisions, motions, etc.
  • Create custom alerts for specific article and case topics and so much more!


Hello! I'm Law360's automated support bot.

How can I help you today?

For example, you can type:
  • I forgot my password
  • I took a free trial but didn't get a verification email
  • How do I sign up for a newsletter?
Ask a question!