Share on LinkedInShare on LinkedIn

ARTICLE · 24 APRIL 2024

State Data Breach Notification Laws

Foley & Lardner LLP
Explore more from Foley & Lardner LLP

While most state data breach notification statutes contain similar components, there are important differences, meaning a one-size-fits-all approach to notification will not suffice.

United StatesPrivacy
Jennifer Urban
Jennifer Urban
Jennifer J. Hennessy
Jennifer J. Hennessy
Samuel D. Goldstick
Samuel D. Goldstick
Lauren Hudon
Lauren Hudon
Author LinkedIn connections

While most state data breach notification statutes contain similar components, there are important differences, meaning a one-size-fits-all approach to notification will not suffice. What's more, as data breaches continue to rise, states are responding with increasingly frequent and divergent changes to their statutes, creating challenges for compliance. Organizations must make it a priority to monitor these changes to prepare for and respond to data breaches.

For a summary of basic state notification requirements that apply to entities who "own" data, download Foley's State Data Breach Notification Laws Chart. This chart is current as of April 11, 2024, and should be used for informational purposes only because the recommended actions an entity should take if it experiences a security event, incident, or breach vary depending on the specific facts and circumstances.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

The Data Breach Brief: Week Of September 30th, 2026

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.
United StatesPrivacy
Morgan & Morgan
Morgan & Morgan
Article

California Legislation: End-Of-Session Check-In

California's legislature has sent a comprehensive package of privacy, AI, and advertising bills to Governor Newsom's desk, with decisions due by September 30, 2026. The legislation addresses sensitive personal information protections, data broker obligations, AI-powered chatbot regulations, and digital replica rights, potentially reshaping how businesses handle consumer data and automated decision-making systems. Will these bills become law and set new national standards for technology regulation?
United StatesPrivacy
Frankfurt Kurnit Klein & Selz PC
Frankfurt Kurnit Klein & Selz PC
Article

Emerging Enforcement Trends In Digital Health Data Privacy: Lessons From Washington’s My Health My Data, FTC vs. Hims & Hers And UCHealth Enforcement Actions

Federal and state regulators are intensifying scrutiny of healthcare and digital health companies over tracking technologies that share sensitive patient data with advertising platforms. Recent enforcement actions against major telehealth providers and healthcare systems reveal how common marketing practices can trigger significant legal liability under privacy laws, even for organizations not covered by HIPAA.
United StatesPrivacy
Benesch, Friedlander, Coplan & Aronoff LLP
Benesch, Friedlander, Coplan & Aronoff LLP
Article

Texas Governor Abbott Directs TCEQ To Freeze All Data Center Permits In A Whole-of-Government Action

Governor Greg Abbott has ordered the Texas Commission on Environmental Quality to immediately halt all environmental permits for data center projects, expanding a statewide regulatory freeze that now encompasses power, water, and environmental approvals. This directive establishes strict operational mandates requiring data centers to fully fund infrastructure costs, report all resource consumption...
United StatesEnvironment
Foley & Lardner LLP
Foley & Lardner LLP
Article

California Enacts Seven Data Center Bills, Effective January 1, 2027: New Tariff, Entitlement, And Disclosure Rules For Hyperscalers, Developers, And Power Producers

California Governor Newsom signed seven data center bills into law on September 21, 2026, establishing a comprehensive regulatory framework that takes effect January 1, 2027. These bills create new tariff regimes administered by the California Public Utilities Commission, impose extensive reporting requirements on data center operators, and establish water disclosure mandates and CEQA treatment protocols.
United StatesEnergy and Natural Resources
Foley & Lardner LLP
Foley & Lardner LLP
Article

Texas Escalates Data Center Oversight With Attorney General Water-Use Investigation

Texas has launched a sweeping investigation into hundreds of data center developments that failed to comply with mandatory water use surveys, marking the latest escalation in a seven-week regulatory crackdown. The state's actions have frozen permits, paused interconnection studies, and exposed projects to criminal and civil enforcement, all while the industry faces mounting scrutiny over its rapidly growing demands on electricity and water infrastructure. With multiple state agencies now coordinating enforc
United StatesEnergy and Natural Resources
Foley & Lardner LLP
Foley & Lardner LLP
Article

Oil Is Near $90 And Gas Is Near $3. Same Wells, Different Markets.

Associated gas production in the Permian Basin continues to surge alongside oil drilling, but natural gas prices have diverged sharply from crude oil, creating significant challenges for contracts written under different price assumptions. With Henry Hub futures trading around $3 per million Btu while WTI crude hovers near $90 per barrel, operators and service companies face difficult questions about pricing mechanisms, curtailment rights, and minimum volume commitments that may no longer reflect current
United StatesEnergy and Natural Resources
Foley & Lardner LLP
Foley & Lardner LLP
Article

Diesel Stocks Are Expected To Fall Below 100 Million Barrels. Check Your Fuel Clauses.

Diesel prices have shattered records, hitting $6.529 per gallon nationally while distillate inventories plunge below five-year lows and are expected to remain there through most of 2027. With crack spreads exceeding $106 per barrel and global supply disruptions intensifying, fleet operators and oilfield services companies face mounting fuel costs that many existing contracts weren't designed to handle.
United StatesEnergy and Natural Resources
Foley & Lardner LLP
Foley & Lardner LLP